CVE-2022-25451

Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A hidden stack overflow looms in Tenda AC6 routers! The flaw sneaks in through the list parameter in the setstaticroutecfg function, making it a surprisingly simple target for exploitation! 🔥 Think of it like a restaurant overwhelmed by too many orders at once. When the kitchen can't handle the demand, it starts messing up meals, leading to chaos. In this case, the stack overflow could let attackers disrupt the router's normal operations, just like a busy kitchen yielding burnt entrees. If exploited, this vulnerability could cause the router to crash or behave unpredictably, affecting your home network's performance—imagine your Wi-Fi dropping during a crucial video call! While it's not confirmed that anyone is actively exploiting it, the potential for disruption is real.

Put simply

Think of it like a restaurant overwhelmed by too many orders at once. When the kitchen can't handle the demand, it starts messing up meals, leading to chaos. In this case, the stack overflow could let attackers disrupt the router's normal operations, just like a busy kitchen yielding burnt entrees. This stack overflow vulnerability allows an attacker to send carefully crafted input via the list parameter in the setstaticroutecfg function, potentially leading to arbitrary code execution within the router's operating context.

What to do

If exploited, this vulnerability could cause the router to crash or behave unpredictably, affecting your home network's performance—imagine your Wi-Fi dropping during a crucial video call! While it's not confirmed that anyone is actively exploiting it, the potential for disruption is real. To secure your Tenda AC6, make sure to update the firmware to the latest version as soon as it's available. Additionally, consider changing the default settings and monitoring the network for unusual activity to protect against potential future exploits. You've got this! Stay vigilant and keep your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the setstaticroutecfg function
    cvelistv5