CVE-2022-37814

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

⚠️ Multiple stack overflows lurk in the Tenda AC1206, waiting for just the right inputs to crash the party! Think of this vulnerability like a crowded concert where too many fans push forward at once—things can get messy quickly, and the whole setup might fall apart! An attacker could exploit this stack overflow vulnerability to destabilize the device, potentially leading to a crash or denial of service. While it’s not an immediate remote code execution risk, it could disrupt your network and leave it vulnerable to further attacks.

Put simply

Think of this vulnerability like a crowded concert where too many fans push forward at once—things can get messy quickly, and the whole setup might fall apart! This vulnerability arises from unchecked input via the deviceMac and device_id parameters in the addWifiMacFilter function, allowing attackers to manipulate stack memory and potentially crash the device.

What to do

An attacker could exploit this stack overflow vulnerability to destabilize the device, potentially leading to a crash or denial of service. While it’s not an immediate remote code execution risk, it could disrupt your network and leave it vulnerable to further attacks. To protect your device, ensure that you are running the latest firmware version available from Tenda. Regularly check for updates and apply them to maintain a secure environment. Also, consider disabling unnecessary features or services that may expose your device further. You've got this! Stay proactive, and your network will be secure in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.8th percentile
Published
2022-08-25T14:07Z
EPSS history
Timeline
  • 25 AUG 14:07Z
    Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter
    cvelistv5