CVE-2022-25446

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in Tenda AC6! This vulnerability arises from the schedstarttime parameter in the openSchedWifi function, ready to cause some mischief. 🦸‍♂️ Think of this like a restaurant where the orders start piling up, but the kitchen runs out of space to put them, causing chaos! If it keeps receiving requests without handling them properly, the whole system can crash! If exploited, the stack overflow could lead to unexpected behavior or crashes in your Tenda AC6 device, leading to potential connectivity issues. While it hasn’t been known to be actively exploited yet, it’s better to be safe than sorry!

Put simply

Think of this like a restaurant where the orders start piling up, but the kitchen runs out of space to put them, causing chaos! If it keeps receiving requests without handling them properly, the whole system can crash! This vulnerability stems from a stack overflow issue triggered by improper handling of the schedstarttime parameter in the openSchedWifi function, allowing an attacker to disrupt the service.

What to do

If exploited, the stack overflow could lead to unexpected behavior or crashes in your Tenda AC6 device, leading to potential connectivity issues. While it hasn’t been known to be actively exploited yet, it’s better to be safe than sorry! To keep your device secure, check for updates from Tenda and ensure you are running the latest firmware version. Regularly monitor your router’s performance and reset it if you notice any unusual behavior. You've got this! Simple steps can help keep your devices secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime parameter in the openSchedWifi function
    cvelistv5