CVE-2022-25448

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ There's a sneaky stack overflow lurking in Tenda AC6 routers! This vulnerability can be triggered through the *day* parameter in the *openSchedWifi* function, potentially causing unexpected behavior. 😮 Think of it like a traffic jam caused by an oversized delivery truck trying to make a left turn that simply won’t fit — it blocks the entire street and slows everything down! An attacker could exploit this stack overflow, leading to service disruption or even a crash of the router, impacting your network connectivity. This means your Wi-Fi could go down at the worst possible moment, leaving you in the digital dark!

Put simply

Think of it like a traffic jam caused by an oversized delivery truck trying to make a left turn that simply won’t fit — it blocks the entire street and slows everything down! The vulnerability stems from the *openSchedWifi* function, where improper handling of the *day* parameter allows an attacker to cause a stack overflow, potentially leading to unexpected behavior or crashes.

What to do

An attacker could exploit this stack overflow, leading to service disruption or even a crash of the router, impacting your network connectivity. This means your Wi-Fi could go down at the worst possible moment, leaving you in the digital dark! To remediate this, update your Tenda AC6 router to the latest firmware version available from the manufacturer. Regularly check for firmware updates to ensure your devices are protected against such vulnerabilities. You’ve got this! Follow these steps to keep your network secure and your Wi-Fi flying high! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in the openSchedWifi function
    cvelistv5