CVE-2022-26278

Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function

published March 28, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in the Tenda AC9 router! This vulnerability can be exploited simply through the time parameter in the PowerSaveSet function. 🔥 Think of it like a restaurant with a faulty reservation system that keeps accepting extra diners without checking if the tables can handle them. Eventually, the system collapses under the pressure of too many guests! If an attacker manipulates the time parameter, they could potentially crash the device, disrupt your network, and create chaos in your home or office. While it hasn't been exploited yet, the possibility for remote interference is absolutely concerning!

Put simply

Think of it like a restaurant with a faulty reservation system that keeps accepting extra diners without checking if the tables can handle them. Eventually, the system collapses under the pressure of too many guests! This vulnerability occurs due to a stack overflow in the PowerSaveSet function, which can be triggered by a specially crafted time parameter. This allows for unauthorized actions that could destabilize the device.

What to do

If an attacker manipulates the time parameter, they could potentially crash the device, disrupt your network, and create chaos in your home or office. While it hasn't been exploited yet, the possibility for remote interference is absolutely concerning! To mitigate this risk, ensure your Tenda AC9 router is updated to the latest firmware version. Check the manufacturer's website regularly for patches, and enable any additional security features available. 🛡️ You've got this! Stay vigilant and keep your devices updated to protect against unwanted surprises! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-03-28T20:58Z
EPSS history
Timeline
  • 28 MAR 20:58Z
    Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function
    cvelistv5