Security readout for executives and security teams
Plain-English summary
This CVE describes a Tenda AC6 AC1200 v5.0 router flaw that can remove the Wi-Fi password and switch wireless security to open mode. That could expose a site network to nearby unauthorized users. Public data does not provide CVSS, confirmed exploitation, or a named vendor fix.
Executive priority
Treat this as a targeted network exposure issue, not a confirmed internet-wide emergency. Prioritize validation in branch, small-office, lab, and unmanaged network environments where consumer routers may still be deployed.
Technical view
CVE-2022-37176 affects Tenda AC6 AC1200 v5.0 firmware v02.03.01.114 and below. The reported behavior is unauthorized Wi-Fi security reconfiguration via a crafted packet to goform/setWizard. The record does not include CWE, CVSS, patch status, authentication requirements, or reliable exploit prevalence.
Likely exposure
Exposure is likely limited to organizations still operating Tenda AC6 AC1200 v5.0 routers on firmware v02.03.01.114 or below. Risk is highest where router management paths are reachable from untrusted networks or where wireless configuration changes are not monitored.
Exploitation context
The provided sources do not show CISA KEV listing or confirmed active exploitation. The CVE description indicates a crafted packet can trigger the configuration change, but the bundle does not provide enough evidence to assess attacker prerequisites or real-world exploitation.
Researcher notes
The source bundle is thin: affected product details are in the title and description, while structured affected data is not populated. No CVSS, CWE, patch reference, or KEV evidence is supplied, so confidence in severity and exploitability is limited.
Mitigation direction
- Inventory Tenda AC6 AC1200 v5.0 routers and record firmware versions.
- Check Tenda vendor guidance for fixed firmware or replacement advice.
- Restrict router management access to trusted administrative networks only.
- Monitor Wi-Fi security settings for unexpected open-mode changes.
- Replace or isolate affected routers if no vendor-supported fix exists.
Validation and detection
- Confirm whether any deployed device is Tenda AC6 AC1200 v5.0.
- Compare firmware versions against v02.03.01.114 and below.
- Review wireless settings for missing passwords or open security mode.
- Check configuration-change logs where available.
- Document compensating controls if vendor remediation is unavailable.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Credential and access behavior lookup
The CVE wording references authentication or credential exposure, so valid-account and credential-access review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2022-37176 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://drive.google.com/drive/folders/1L6ojSooP8sbZLQYRsAxlb0IWVAZef8Z7?usp=sharingCVE reference, mitre
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.