CVE-2022-37176

CriticalCVSS 9.8

Published: 30/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

Summary

A vulnerability in the firmware of Tenda AC6 (AC1200) v5.0 and below allows attackers to remove the Wi-Fi password and force the device into open security mode by sending a crafted packet to the goform/setWizard form.

Risk Assessment

The risk is that an attacker can remotely disable Wi-Fi security, enabling unauthorized access to the local network, traffic interception, and potential further attacks on network devices.

Recommendation

It is recommended to immediately update the Tenda AC6 router firmware to the latest available version that fixes this vulnerability. If no update is available, consider replacing the device with a model that has current vendor support.

Original NVD description (English source)

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard.