CVE-2022-32385

CriticalCVSS 9.8

Published: 06/07/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.89%

77th percentile - higher than 77% of all known CVEs

Summary

A stack overflow vulnerability was discovered in the Tenda AC23 router running firmware version v16.03.07.44. This allows a remote attacker to execute arbitrary code on the device.

Risk Assessment

An attacker can remotely take control of the router, compromising network confidentiality and integrity, and potentially using the device for further attacks.

Recommendation

Immediately update the Tenda AC23 router firmware to the latest available version that fixes this vulnerability. If no update is available, consider replacing the device with a supported model.

Original NVD description (English source)

Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).