CVE-2022-25418

Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi

published February 22, 2022

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

⚠️ A stack overflow in the Tenda AC9 could make your wifi management a bit too chaotic! 🌀 Think of it like trying to cram too many clothes into a suitcase — eventually, something’s going to pop! In this case, the `openSchedWifi` function can overflow, leading to unexpected behavior. If exploited, this vulnerability could allow attackers to crash the system or potentially execute arbitrary code. While there’s no active exploitation reported yet, the risk is significant given the control over network settings it could provide. 🌐⚡

Put simply

Think of it like trying to cram too many clothes into a suitcase — eventually, something’s going to pop! In this case, the `openSchedWifi` function can overflow, leading to unexpected behavior. The stack overflow vulnerability in Tenda AC9 stems from improper handling of input in the `openSchedWifi` function, which can lead to stack memory corruption.

What to do

If exploited, this vulnerability could allow attackers to crash the system or potentially execute arbitrary code. While there’s no active exploitation reported yet, the risk is significant given the control over network settings it could provide. 🌐⚡ To remediate this, it's crucial to update your device to the latest firmware version as soon as it becomes available. Regularly check for updates from Tenda to ensure you’re protected against potential exploits. You’ve got this! Stay vigilant and keep those devices updated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01761 · 77.8th percentile
Published
2022-02-22T22:44Z
EPSS history
Timeline
  • 22 FEB 22:44Z
    Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi
    cvelistv5