CVE-2022-42170

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart

Critical · published October 17, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

🚨 A single input can trigger a stack overflow in the Tenda AC10 router, leaving your network wide open for chaos! 🔥 Think of it like a crowded elevator that suddenly gets overloaded — when too many people push their way in, everything comes crashing down. This vulnerability works the same way, overwhelming the system and causing a breakdown! An attacker could exploit this flaw to gain unauthorized access and execute arbitrary code, potentially taking full control of your network! This could lead to data breaches, unauthorized surveillance, or even turning your router into a launching pad for further attacks. Absolutely devastating!

Put simply

Think of it like a crowded elevator that suddenly gets overloaded — when too many people push their way in, everything comes crashing down. This vulnerability works the same way, overwhelming the system and causing a breakdown! This stack overflow vulnerability exists in the '/goform/formWifiWpsStart' endpoint, allowing attackers to manipulate input and crash the system, which could lead to remote code execution without proper checks.

What to do

An attacker could exploit this flaw to gain unauthorized access and execute arbitrary code, potentially taking full control of your network! This could lead to data breaches, unauthorized surveillance, or even turning your router into a launching pad for further attacks. Absolutely devastating! Update your Tenda AC10 router to version V15.03.06.24 or later immediately. Also, consider implementing access controls to limit exposure to this endpoint. Don't forget to regularly review your network security settings! You've got this! Follow these steps, and you'll be back to enjoying a secure network in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01111 · 65.7th percentile
Published
2022-10-17T00:00Z
EPSS history
Timeline
  • 17 OCT 00:00Z
    Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart
    cvelistv5