CVE-2022-42058

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function

Critical · published November 15, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

🔥 A crafty stack overflow in Tenda's AC1200 Router could bring your network to its knees! 🚨 Think of this vulnerability like a pesky traffic jam caused by a single car blocking a narrow street — the setRemoteWebManage function is the bottleneck, and once overloaded, it sends everything into chaos! An attacker could exploit this flaw to flood your router with crafted data, resulting in a Denial of Service (DoS) that brings your internet access to a screeching halt. Imagine being unable to connect to your favorite streaming service or video call just when you need it most. Absolutely devastating!

Put simply

Think of this vulnerability like a pesky traffic jam caused by a single car blocking a narrow street — the setRemoteWebManage function is the bottleneck, and once overloaded, it sends everything into chaos! This stack overflow vulnerability in the Tenda AC1200 Router's setRemoteWebManage function allows attackers to send oversized data, crashing the router and effectively cutting off all network connectivity.

What to do

An attacker could exploit this flaw to flood your router with crafted data, resulting in a Denial of Service (DoS) that brings your internet access to a screeching halt. Imagine being unable to connect to your favorite streaming service or video call just when you need it most. Absolutely devastating! To protect your network, update your Tenda AC1200 Router to the latest firmware version immediately. Disable any unnecessary remote management features, and consider setting up a firewall to filter incoming traffic. Don't wait — secure your network today! You've got this! Follow these steps, and you'll be back to surfing safely in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01377 · 71.9th percentile
Published
2022-11-15T00:00Z
EPSS history
Timeline
  • 15 NOV 00:00Z
    Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function
    cvelistv5