CVE-2022-25456

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function

published March 18, 2022

CVSS
โ€”
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

โš ๏ธ A sneaky stack overflow is waiting in the Tenda AC6โ€™s `WifiBasicSet` function! Just a tweak of the `security_5g` parameter could tip the balance. ๐Ÿ’ฅ Think of it like a crowded elevator where one extra person pushes everyone beyond capacity โ€” it could lead to a shutdown! Similarly, this stack overflow can overwhelm the system's memory, risking total failure. If exploited, this vulnerability could cause the device to crash or behave unpredictably, opening the door for further issues down the line. While it's not currently being exploited, you don't want to give attackers an easy way in. Let's get ahead of this before it becomes a headache!

Put simply

Think of it like a crowded elevator where one extra person pushes everyone beyond capacity โ€” it could lead to a shutdown! Similarly, this stack overflow can overwhelm the system's memory, risking total failure. This stack overflow occurs when the `security_5g` parameter in the `WifiBasicSet` function exceeds the memory limits, potentially allowing arbitrary code execution if an attacker crafts the input correctly.

What to do

If exploited, this vulnerability could cause the device to crash or behave unpredictably, opening the door for further issues down the line. While it's not currently being exploited, you don't want to give attackers an easy way in. Let's get ahead of this before it becomes a headache! To mitigate this risk, update the Tenda AC6 firmware to the latest version available and review configurations to ensure that parameters are within safe limits. Regularly check manufacturer releases for patches addressing vulnerabilities like this. You've got this! Stay proactive with these updates, and you'll keep your network safe and sound! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 ยท 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function
    cvelistv5