CVE-2022-25417

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo

published February 22, 2022

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurks in the Tenda AC9, ready to cause unexpected chaos from a function called saveparentcontrolinfo! Think of this as an overflowing suitcase that bursts open at the airport, spilling its contents everywhere because it was stuffed beyond capacity. In the same way, this vulnerability allows data to spill over into unintended areas of memory, potentially causing system instability. An attacker could exploit this flaw, leading to unexpected behaviors like crashes or erratic performance. While no known exploits are actively targeting this issue, the potential for disruption means it shouldn't be ignored.

Put simply

Think of this as an overflowing suitcase that bursts open at the airport, spilling its contents everywhere because it was stuffed beyond capacity. In the same way, this vulnerability allows data to spill over into unintended areas of memory, potentially causing system instability. This vulnerability allows a stack overflow through the saveparentcontrolinfo function, which can lead to memory corruption and unpredictable behavior in the Tenda AC9 router.

What to do

An attacker could exploit this flaw, leading to unexpected behaviors like crashes or erratic performance. While no known exploits are actively targeting this issue, the potential for disruption means it shouldn't be ignored. To address this issue, ensure your router is updated to the latest firmware version. Stay vigilant by regularly checking for updates from Tenda, and consider disabling unused features until a patch is available. You've got this! With a little diligence and updates, you can keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01761 · 77.8th percentile
Published
2022-02-22T22:44Z
EPSS history
Timeline
  • 22 FEB 22:44Z
    Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo
    cvelistv5