CVE-2022-37812

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg

published August 25, 2022

CVSS
โ€”
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

โš ๏ธ A sneaky stack overflow hides in Tenda AC1206! The firewallEn parameter in formSetFirewallCfg is your red flag. ๐Ÿ”ฅ Think of this like a crowded elevator โ€” if you keep adding people without checking the weight limit, you'll eventually overload it and cause a malfunction, making it stop unexpectedly. An attacker could exploit this stack overflow to potentially crash the device or perform unauthorized operations. This means your router could become unresponsive at a critical moment, leaving your network vulnerable.

Put simply

Think of this like a crowded elevator โ€” if you keep adding people without checking the weight limit, you'll eventually overload it and cause a malfunction, making it stop unexpectedly. This vulnerability involves a stack overflow in the Tenda AC1206 router's firewall configuration function, triggered by the malicious input of the firewallEn parameter. This can lead to memory corruption and unexpected behavior in the device.

What to do

An attacker could exploit this stack overflow to potentially crash the device or perform unauthorized operations. This means your router could become unresponsive at a critical moment, leaving your network vulnerable. Update your Tenda AC1206 router to the latest firmware version to patch this vulnerability. Regularly check for firmware updates to protect against emerging issues, and consider disabling features that you do not actively use to minimize attack surfaces. You've got this! Stay vigilant, keep your router secure, and enjoy a safer network experience! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 ยท 67.9th percentile
Published
2022-08-25T14:05Z
EPSS history
Timeline
  • 25 AUG 14:05Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg
    cvelistv5