CVE-2022-25449

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A simple parameter is the entire exploit! The Tenda AC6 router has a stack overflow vulnerability lurking in the deviceId parameter, ready to cause chaos in your home network. 🔥 Think of it like a restaurant where one customer's oversized order causes the entire kitchen to jam. Just like that, a single oversized deviceId input can overload the router’s stack and create a mess. This stack overflow could lead to unexpected behavior, potentially crashing your router or allowing attackers to run malicious code. Imagine your internet going down just as you settle in for movie night—absolutely devastating!

Put simply

Think of it like a restaurant where one customer's oversized order causes the entire kitchen to jam. Just like that, a single oversized deviceId input can overload the router’s stack and create a mess. The vulnerability in Tenda AC6 v15.03.05.09_multi occurs when the saveParentControlInfo function fails to adequately validate the deviceId parameter, leading to a stack overflow condition.

What to do

This stack overflow could lead to unexpected behavior, potentially crashing your router or allowing attackers to run malicious code. Imagine your internet going down just as you settle in for movie night—absolutely devastating! To protect your network, ensure that your Tenda AC6 is updated to the latest firmware version. Regularly check for updates and consider limiting access to your router’s administrative functions to trusted devices. You've got this! Stay vigilant and keep your network secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function
    cvelistv5