CVE-2022-37815

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in Tenda AC1206 could spill over into trouble! Just the wrong input for the PPPOEPassword parameter might trigger it. 🔥 Think of it like trying to pour way too much liquid into a glass — eventually, it's going to overflow and create a mess when the glass can't hold it all. That’s exactly what can happen here when the system doesn’t handle inputs properly. If exploited, this could lead to unexpected behavior or crashes in the device, potentially compromising network security. While the exploit has not been publicly known, the risk of instability could impact your connectivity. It's a sneaky little issue that could become a big headache!

Put simply

Think of it like trying to pour way too much liquid into a glass — eventually, it's going to overflow and create a mess when the glass can't hold it all. That’s exactly what can happen here when the system doesn’t handle inputs properly. The vulnerability results from a stack overflow in the Tenda AC1206 router due to improper input handling of the PPPOEPassword parameter in the formQuickIndex function. This means an attacker could potentially manipulate the input to crash the system or execute arbitrary code.

What to do

If exploited, this could lead to unexpected behavior or crashes in the device, potentially compromising network security. While the exploit has not been publicly known, the risk of instability could impact your connectivity. It's a sneaky little issue that could become a big headache! To protect your network, ensure you update the Tenda AC1206 to the latest firmware version available from the manufacturer. Regularly check for updates and avoid entering overly long or suspicious strings in parameters to prevent overflow issues. 🛡️ This is fixable! Stay updated and keep your devices secure, and you'll be the hero of your network! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:06Z
EPSS history
Timeline
  • 25 AUG 14:06Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex
    cvelistv5