CVE-2022-43024

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg

Critical · published October 19, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

🔥 A single flawed parameter can trigger a stack overflow on your Tenda TX3 router, putting your network in jeopardy! Think of it like a crowded elevator that suddenly gets overloaded — it can crash and leave everyone inside in quite a bind. In this case, the 'list' parameter at /goform/SetVirtualServerCfg is the overstuffed elevator, leading to a potential system collapse. An attacker could exploit this vulnerability to crash your router or run arbitrary code, which would be absolutely devastating for your network. The implications? Total loss of control over your router, potentially allowing an intruder to take over your entire system and compromise your data.

Put simply

Think of it like a crowded elevator that suddenly gets overloaded — it can crash and leave everyone inside in quite a bind. In this case, the 'list' parameter at /goform/SetVirtualServerCfg is the overstuffed elevator, leading to a potential system collapse. This stack overflow vulnerability occurs due to improper handling of the 'list' parameter, allowing attackers to overwrite critical memory locations. This can lead to unauthorized execution of code, which could result in severe security breaches.

What to do

An attacker could exploit this vulnerability to crash your router or run arbitrary code, which would be absolutely devastating for your network. The implications? Total loss of control over your router, potentially allowing an intruder to take over your entire system and compromise your data. Update your router firmware immediately to the latest version to close this vulnerability. Additionally, review your settings and configurations to ensure no further security holes exist. Regularly check for updates to keep your devices secure. You've got this! By taking these steps, you’re on your way to securing your network like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00911 · 59.6th percentile
Published
2022-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg
    cvelistv5