CVE-2022-25431

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A handful of parameters can lead to multiple stack overflows in Tenda AC9's firmware! This means a crafty attacker could exploit them like a magician pulling endless scarves from a hat! 🎩✨ Think of it like a restaurant with a faulty ordering system that accepts orders for more food than they can handle — one wrong dish can cause a kitchen meltdown! The stack overflow occurs when the software exceeds its memory limits, leading to unpredictable results. 🍽️🤯 If an attacker successfully triggers this vulnerability, it could lead to crashes or even a complete takeover of the device, rendering your trusty router useless! Imagine your internet grinding to a halt because a mischievous hacker decided to play chef in your kitchen!

Put simply

Think of it like a restaurant with a faulty ordering system that accepts orders for more food than they can handle — one wrong dish can cause a kitchen meltdown! The stack overflow occurs when the software exceeds its memory limits, leading to unpredictable results. 🍽️🤯 This vulnerability arises from multiple stack overflows through the NPTR, V12, V10, and V11 parameters in the Formsetqosband function of Tenda AC9 v15.03.2.21. An attacker could manipulate these parameters to disrupt normal function and potentially execute arbitrary code.

What to do

If an attacker successfully triggers this vulnerability, it could lead to crashes or even a complete takeover of the device, rendering your trusty router useless! Imagine your internet grinding to a halt because a mischievous hacker decided to play chef in your kitchen! To protect yourself, update your Tenda AC9 router firmware to the latest version where this issue is fixed. Regularly check for firmware updates and ensure your device settings are properly configured to prevent unauthorized access. 🛡️ You’ve got this! Stay vigilant, keep your firmware updated, and you'll ensure your network remains secure! 🚀✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function
    cvelistv5