CVE-2022-42168

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind

Critical · published October 17, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability in Tenda AC10 could turn your router into a playground for attackers! Think of this vulnerability like a delivery truck that keeps getting packed with more and more boxes until it finally topples over, spilling everything it was carrying. In this case, that could mean hackers getting full control over your network! With this stack overflow, a crafty attacker can potentially crash your router or even execute arbitrary code, leading to a complete takeover of your home network. This could result in anything from snooping on your communications to hijacking your connected devices — not good!

Put simply

Think of this vulnerability like a delivery truck that keeps getting packed with more and more boxes until it finally topples over, spilling everything it was carrying. In this case, that could mean hackers getting full control over your network! The vulnerability exists in the /goform/fromSetIpMacBind function, where improper handling of input leads to stack overflow, allowing an attacker to manipulate the execution flow of the device.

What to do

With this stack overflow, a crafty attacker can potentially crash your router or even execute arbitrary code, leading to a complete takeover of your home network. This could result in anything from snooping on your communications to hijacking your connected devices — not good! Immediately update your Tenda AC10 to the patched version V15.03.06.24. Disable remote management to reduce exposure. Regularly review device security settings and monitor for unusual activity. You've got this! By taking these steps, you'll fortify your router against potential threats. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01111 · 65.7th percentile
Published
2022-10-17T00:00Z
EPSS history
Timeline
  • 17 OCT 00:00Z
    Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind
    cvelistv5