CVE-2022-25450

Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function

published March 18, 2022

CVSS
—
EPSS
12%
Percentile
96.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in Tenda AC6 routers! The issue arises from the 'list' parameter in the SetVirtualServerCfg function, which could lead to some serious trouble if not addressed. 🔥 Think of it like a cafeteria that keeps piling on food without checking if the plates can hold it — eventually, they'll overflow and create a real mess. This overflow can cause the router to crash or behave erratically, affecting your entire network. If exploited, this stack overflow could allow an attacker to disrupt the router's functionality, potentially taking down your network service completely. While there's no known exploit out in the wild just yet, the risk is there, and a crafty intruder could use it to create chaos in your digital space.

Put simply

Think of it like a cafeteria that keeps piling on food without checking if the plates can hold it — eventually, they'll overflow and create a real mess. This overflow can cause the router to crash or behave erratically, affecting your entire network. The vulnerability exists due to improper handling of input in the SetVirtualServerCfg function, specifically with the 'list' parameter, which can lead to a stack overflow condition. This could allow an attacker to manipulate the router's behavior or crash it altogether.

What to do

If exploited, this stack overflow could allow an attacker to disrupt the router's functionality, potentially taking down your network service completely. While there's no known exploit out in the wild just yet, the risk is there, and a crafty intruder could use it to create chaos in your digital space. To safeguard your network, patch your Tenda AC6 device to the latest firmware version immediately. Additionally, regularly check for updates to ensure that any vulnerabilities are addressed promptly. Consider changing default settings for added security. You’ve got this! With these steps, you’ll be reinforcing your digital fortress in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11550 · 96.0th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function
    cvelistv5