CVE-2022-28560

There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router

published May 3, 2022

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in the Tenda AC9 router could allow attackers to gain unauthorized access with just the right payload! 🔒 Think of this vulnerability like a restaurant kitchen where one overly large order could spill over and disrupt the entire operation — a single miscalculation sends everything into chaos. 🍽️ If exploited, an attacker could gain a stable shell on your router, giving them control over your network. This means they could potentially monitor your traffic, manipulate settings, or even hijack other connected devices! Absolutely devastating if it falls into the wrong hands!

Put simply

Think of this vulnerability like a restaurant kitchen where one overly large order could spill over and disrupt the entire operation — a single miscalculation sends everything into chaos. 🍽️ This stack overflow vulnerability exists in the goform/fast_setting_wifi_set function of the httpd service on the Tenda AC9 router. By sending a specifically crafted payload, attackers can exploit the overflow to execute their own commands.

What to do

If exploited, an attacker could gain a stable shell on your router, giving them control over your network. This means they could potentially monitor your traffic, manipulate settings, or even hijack other connected devices! Absolutely devastating if it falls into the wrong hands! To secure your Tenda AC9 router, ensure you patch this vulnerability by upgrading to the latest firmware version. Regularly check for updates and review your router’s security settings to minimize risk. Stay vigilant! You've got this! With these steps, you'll keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01692 · 76.9th percentile
Published
2022-05-03T15:20Z
EPSS history
Timeline
  • 03 MAY 15:20Z
    There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router
    cvelistv5