CVE-2022-25434

Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function

published March 18, 2022

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

⚠️ A crafty stack overflow hides in the Tenda AC9 router! This sneaky flaw in the SetFirewallCfg function can be exploited with the firewallen parameter. ⚡ Think of it like a restaurant that overflows with orders because it can’t handle too many at once — one extra dish sent back and the whole kitchen can become a chaotic mess! 🍽️ An attacker could potentially crash the router, disrupting your home network and leaving it vulnerable to further exploits. While the immediate threat might not seem catastrophic, such a crash could lead to unexpected behavior or even downtime at the most inconvenient times.

Put simply

Think of it like a restaurant that overflows with orders because it can’t handle too many at once — one extra dish sent back and the whole kitchen can become a chaotic mess! 🍽️ This vulnerability allows a stack overflow to occur when the firewallen parameter receives excessively large input, overwhelming the SetFirewallCfg function and causing the device to malfunction.

What to do

An attacker could potentially crash the router, disrupting your home network and leaving it vulnerable to further exploits. While the immediate threat might not seem catastrophic, such a crash could lead to unexpected behavior or even downtime at the most inconvenient times. To mitigate this risk, check your Tenda AC9 router for updates and ensure you're running the latest firmware version. Regularly review your router’s configurations and monitor for any unusual behavior. 🛡️ You've got this! Stay vigilant, and your network will be a fortress! 🔐

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09135 · 95.3th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function
    cvelistv5