CVE-2022-25455

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is lurking in Tenda AC6 routers! The list parameter in the SetIpMacBind function could be your downfall. ⚡ Think of it like a restaurant kitchen that can only handle a certain number of orders at once. If the staff receives too many orders, the system can crash under pressure, leaving the diners in chaos! If an attacker exploits this stack overflow, they could cause the device to crash or potentially execute arbitrary code. Imagine your router spinning out of control, leading to a loss of connectivity and affecting all devices in your home. That's not a pleasant dinner party!

Put simply

Think of it like a restaurant kitchen that can only handle a certain number of orders at once. If the staff receives too many orders, the system can crash under pressure, leaving the diners in chaos! This vulnerability allows for a stack overflow condition via the list parameter in the SetIpMacBind function, which could be exploited to crash the router or execute harmful instructions if adequately crafted payloads are sent.

What to do

If an attacker exploits this stack overflow, they could cause the device to crash or potentially execute arbitrary code. Imagine your router spinning out of control, leading to a loss of connectivity and affecting all devices in your home. That's not a pleasant dinner party! To protect yourself, be sure to update your Tenda AC6 to version 15.03.05.10 or later as soon as possible. It's also wise to review your router settings and ensure that you have proper security measures in place, like strong passwords. You've got this! Follow these steps, and you'll have your router secured in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function
    cvelistv5