CVE-2022-25447

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A stack overflow is hiding in the Tenda AC6 router, ready to trip up your network! This vulnerability lurks in the `schedendtime` parameter of the `openSchedWifi` function. 🔥 Think of it as a waiter who keeps adding items to an already full order, causing the kitchen to spill over when it can't handle more. Each extra item (or data) pushes the limits until it all comes crashing down! If someone expertly crafts a request, they could trigger this stack overflow, potentially crashing the router or, in a worst-case scenario, executing malicious code. While the immediate effects could be a service interruption, the storm that follows could leave your home network vulnerable!

Put simply

Think of it as a waiter who keeps adding items to an already full order, causing the kitchen to spill over when it can't handle more. Each extra item (or data) pushes the limits until it all comes crashing down! This vulnerability allows for a stack overflow attack through improper handling of the `schedendtime` parameter in the `openSchedWifi` function. This oversight could result in unexpected behavior or allow an attacker to execute arbitrary code.

What to do

If someone expertly crafts a request, they could trigger this stack overflow, potentially crashing the router or, in a worst-case scenario, executing malicious code. While the immediate effects could be a service interruption, the storm that follows could leave your home network vulnerable! To protect your devices, patch the Tenda AC6 router to the latest firmware version, ensuring that any security updates have been applied. Regularly check for updates and review your network settings to tighten security! You've got this! With a few simple steps, you can ensure your network stays safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function
    cvelistv5