CVE-2022-42163

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting

Critical · published October 17, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow vulnerability in Tenda AC10 could turn your router into a playground for attackers! 🔥 Think of it like a restaurant with an unlimited buffet where one rogue customer can keep piling food on their plate until it overflows and spills everywhere. In the same way, this overflow flaw can allow an attacker to overstuff the stack, potentially causing chaos with your device. An attacker could exploit this to crash the router or execute arbitrary code, placing your entire network at risk! With a CVSS score of 9.8, the stakes are high as they could gain full control over your router, leading to devastating consequences like data interception and unauthorized access to connected devices.

Put simply

Think of it like a restaurant with an unlimited buffet where one rogue customer can keep piling food on their plate until it overflows and spills everywhere. In the same way, this overflow flaw can allow an attacker to overstuff the stack, potentially causing chaos with your device. This stack overflow vulnerability occurs via the '/goform/fromNatStaticSetting' endpoint, allowing attackers to manipulate data input in a way that overwhelms the stack, potentially leading to remote code execution.

What to do

An attacker could exploit this to crash the router or execute arbitrary code, placing your entire network at risk! With a CVSS score of 9.8, the stakes are high as they could gain full control over your router, leading to devastating consequences like data interception and unauthorized access to connected devices. Update the Tenda AC10 firmware immediately to address this vulnerability and prevent exploitation. Ensure your router settings are secure and consider enabling additional firewalls to bolster protection against unauthorized access. Regularly check for firmware updates to keep your device secure! You've got this! Stay vigilant and proactive, and your network will be safer than ever! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01102 · 65.5th percentile
Published
2022-10-17T00:00Z
EPSS history
Timeline
  • 17 OCT 00:00Z
    Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting
    cvelistv5