CVE-2022-47126

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet

Critical ยท published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

๐Ÿ”ฅ A stack overflow lurking in Tenda A15 routers allows attackers to exploit the `wrlEn` parameter with a single crafty request! Think of it like a traffic jam caused by a single oversized vehicle trying to squeeze down a narrow street โ€” it blocks everything behind it, and the result is chaos! ๐Ÿšง An attacker could potentially crash the device, gain control, or launch further attacks on your network, leading to absolute pandemonium in your home or office setup. The risk is high, as this could compromise your entire network security!

Put simply

Think of it like a traffic jam caused by a single oversized vehicle trying to squeeze down a narrow street โ€” it blocks everything behind it, and the result is chaos! ๐Ÿšง This vulnerability arises from a stack overflow due to improper handling of the `wrlEn` parameter at the `/goform/WifiBasicSet` endpoint, allowing for malicious payloads to disrupt normal operation and potentially execute arbitrary code.

What to do

An attacker could potentially crash the device, gain control, or launch further attacks on your network, leading to absolute pandemonium in your home or office setup. The risk is high, as this could compromise your entire network security! Patch your Tenda A15 router to version V15.13.07.14 immediately, as this addresses the overflow issue. Also, consider restricting access to your router settings through strong passwords and network segmentation. ๐Ÿ›ก๏ธ You're a security hero for tackling this head-on! Follow these steps, and your network will be safe and sound in no time! ๐ŸŒŸ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 ยท 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet
    cvelistv5