CVE-2022-25459

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function

published March 18, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in the Tenda AC6 router! Just a single parameter mishap could lead to system chaos. 🔥 Think of it like a delivery truck packed so tightly that it can’t take any more packages without bursting. When the S1 parameter gets overloaded, the system can crash, much like that truck tops out and spills everywhere! If an attacker exploits this vulnerability, they could potentially crash the router, leading to a denial of service. This means your network could be knocked offline, leaving you disconnected from the internet—absolutely devastating in our connected world!

Put simply

Think of it like a delivery truck packed so tightly that it can’t take any more packages without bursting. When the S1 parameter gets overloaded, the system can crash, much like that truck tops out and spills everywhere! The vulnerability arises from a stack overflow in the SetSysTimeCfg function, triggered by the S1 parameter. This flaw allows the system to accept more data than it can handle, which can disrupt operations.

What to do

If an attacker exploits this vulnerability, they could potentially crash the router, leading to a denial of service. This means your network could be knocked offline, leaving you disconnected from the internet—absolutely devastating in our connected world! To safeguard your network, it's crucial to update your Tenda AC6 router to the latest firmware version available. Additionally, limit access to router settings to trusted users only—a little caution goes a long way! You've got this! Follow these steps and you’ll keep your router safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-18T20:53Z
EPSS history
Timeline
  • 18 MAR 20:53Z
    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function
    cvelistv5