CVE-2022-43029

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg

Critical · published October 19, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
59.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the Tenda TX3 could give attackers the power to crash your router! 🔥 Think of it like a restaurant where the chef is overwhelmed by too many orders at once; if they can't handle it, the whole kitchen goes down! 🍽️ This vulnerability could lead to a complete denial of service, effectively taking your network offline and making it absolutely devastating for anyone relying on internet access. An attacker might exploit this overflow to manipulate system processes or crash the device, leaving you disconnected and vulnerable.

Put simply

Think of it like a restaurant where the chef is overwhelmed by too many orders at once; if they can't handle it, the whole kitchen goes down! 🍽️ The stack overflow occurs via the 'time' parameter at /goform/SetSysTimeCfg, allowing attackers to send excessively large inputs that exceed the buffer's capacity.

What to do

This vulnerability could lead to a complete denial of service, effectively taking your network offline and making it absolutely devastating for anyone relying on internet access. An attacker might exploit this overflow to manipulate system processes or crash the device, leaving you disconnected and vulnerable. To protect your network, immediately patch your device to the latest firmware version. Ensure to check Tenda's support page for updates and consider implementing network monitoring systems to detect unusual behavior. You've got this! Stay proactive, and you'll keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00911 · 59.7th percentile
Published
2022-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg
    cvelistv5