CVE-2022-25445

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function

published March 18, 2022

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

⚠️ There's a sneaky stack overflow hiding in the Tenda AC6 firmware! A careless time parameter in the PowerSaveSet function opens the door to potential chaos. 🔥 Imagine a computer trying to juggle too many tasks at once, like a waiter dropping plates when overloaded. That's similar to how this stack overflow operates, causing the system to crash under pressure when it receives overly large inputs. If exploited, an attacker could potentially crash the device or cause it to behave erratically, leading to a disrupted home network. This could mean loss of connectivity or the router performing unintended actions, creating headaches for users trying to stay online!

Put simply

Imagine a computer trying to juggle too many tasks at once, like a waiter dropping plates when overloaded. That's similar to how this stack overflow operates, causing the system to crash under pressure when it receives overly large inputs. This vulnerability allows for a stack overflow in the PowerSaveSet function due to improper handling of the time parameter, which can be manipulated to overload the system's stack.

What to do

If exploited, an attacker could potentially crash the device or cause it to behave erratically, leading to a disrupted home network. This could mean loss of connectivity or the router performing unintended actions, creating headaches for users trying to stay online! Users of the Tenda AC6 must update to the latest firmware version to ensure this vulnerability is patched. Regularly check for updates and enable settings that help mitigate potential risks from unexpected inputs. 🛡️ You've got this! With a quick firmware update, your network will be safer and sounder than ever! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09007 · 95.3th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function
    cvelistv5