CVE-2022-25452

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is hiding in Tenda AC6's saveParentControlInfo function! It's like a chaotic game of Jenga where the wrong move could bring the whole stack crashing down. 🔥 Consider this stack overflow like a restaurant that keeps stacking plates higher and higher without checking if they’re stable. One too many plates, and they all come tumbling down, creating a messy disaster! If exploited, an attacker could potentially crash the router or trigger other unpredictable behaviors, leaving your network vulnerable and unstable. Imagine being mid-video call when your router decides to take a nap—absolutely devastating!

Put simply

Consider this stack overflow like a restaurant that keeps stacking plates higher and higher without checking if they’re stable. One too many plates, and they all come tumbling down, creating a messy disaster! This vulnerability arises from an unchecked URL parameter in the saveParentControlInfo function, allowing an attacker to overload the stack and execute malicious code.

What to do

If exploited, an attacker could potentially crash the router or trigger other unpredictable behaviors, leaving your network vulnerable and unstable. Imagine being mid-video call when your router decides to take a nap—absolutely devastating! To safeguard your network, upgrade the Tenda AC6 firmware to the latest version that fixes this vulnerability. Regularly review your router's security settings and consider implementing additional network monitoring solutions. You've got this! With these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function
    cvelistv5