CVE-2022-42169

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter

Critical · published October 17, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability in Tenda AC10 is like leaving the gate wide open for any tech-savvy intruder! Think of it as a banquet where the caterers keep bringing in more and more dishes until the table collapses under the weight—this is what happens when too much data floods the function handling WiFi MAC address filtering. If an attacker discovers this flaw, they could trigger the overflow, potentially allowing them to execute arbitrary code on the device. This could lead to unauthorized access, network manipulation, or even complete control over your router. Yikes!

Put simply

Think of it as a banquet where the caterers keep bringing in more and more dishes until the table collapses under the weight—this is what happens when too much data floods the function handling WiFi MAC address filtering. This vulnerability occurs in the Tenda AC10 router's /goform/addWifiMacFilter endpoint, where a malicious input can lead to a stack overflow, allowing remote code execution without proper authorization.

What to do

If an attacker discovers this flaw, they could trigger the overflow, potentially allowing them to execute arbitrary code on the device. This could lead to unauthorized access, network manipulation, or even complete control over your router. Yikes! To protect yourself, immediately update your Tenda AC10 router to the latest firmware version V15.03.06.24 or newer. Additionally, review your network's security settings to ensure there are no unnecessary open ports. Don't wait! You've got this! With these steps, you’ll be locking down your network tighter than ever! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01111 · 65.7th percentile
Published
2022-10-17T00:00Z
EPSS history
Timeline
  • 17 OCT 00:00Z
    Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter
    cvelistv5