CVE-2022-32386

CriticalCVSS 9.8

Published: 06/07/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.57%

95th percentile - higher than 95% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda AC23 router firmware version v16.03.07.44 in the fromAdvSetMacMtuWan function. An attacker could exploit this flaw to execute arbitrary code or cause a denial of service.

Risk Assessment

The risk involves potential remote code execution by an unauthenticated attacker, leading to full compromise of the router and the network it serves.

Recommendation

Immediately update the Tenda AC23 firmware to the latest patched version if available. Otherwise, restrict remote access to the management interface.

Original NVD description (English source)

Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.