CVE-2022-37811

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is hiding in the Tenda AC1206 firmware, waiting for the right startIp parameter to trigger it! 🔍 Think of this vulnerability like an overstuffed suitcase that bursts open when you stuff in one more item — too much input can easily lead to a crash! 📦 If exploited, an attacker could potentially cause the device to crash or misbehave, leading to unexpected downtime or, in a worst-case scenario, unauthorized access to the network. Not exactly a vacation vibe you’d want!

Put simply

Think of this vulnerability like an overstuffed suitcase that bursts open when you stuff in one more item — too much input can easily lead to a crash! 📦 This vulnerability arises from a stack overflow in the formSetPPTPServer function, which can be triggered by manipulating the startIp parameter, disrupting normal operations of the device.

What to do

If exploited, an attacker could potentially cause the device to crash or misbehave, leading to unexpected downtime or, in a worst-case scenario, unauthorized access to the network. Not exactly a vacation vibe you’d want! To mitigate this issue, update your Tenda AC1206 router to the latest firmware version available on the manufacturer's website. Regularly monitor for updates and consider changing default settings to enhance security. 🛡️ You've got this! Stay vigilant and keep your network safe! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:05Z
EPSS history
Timeline
  • 25 AUG 14:05Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer
    cvelistv5