CVE-2022-40851

Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat

Critical · published September 23, 2022

CVSS v3.1
9.8
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

🔥 A classic stack overflow is hiding in Tenda AC15’s fromAddressNat function, and it could spell disaster! Think of this stack overflow like a waiter who's overloading their tray with too many dishes—eventually, something’s going to crash to the floor. If the waiter can’t handle the order, the restaurant’s operation grinds to a halt! An attacker could exploit this vulnerability to crash the device, potentially leading to a complete denial of service. Imagine your home network being taken down with a single, clever maneuver, leaving you and your devices in the dark. This could affect everything connected to your router, making this a critical issue!

Put simply

Think of this stack overflow like a waiter who's overloading their tray with too many dishes—eventually, something’s going to crash to the floor. If the waiter can’t handle the order, the restaurant’s operation grinds to a halt! CVE-2022-40851 is a stack overflow vulnerability in the Tenda AC15’s fromAddressNat function, which could allow an attacker to manipulate the stack and disrupt normal operations, leading to crashes.

What to do

An attacker could exploit this vulnerability to crash the device, potentially leading to a complete denial of service. Imagine your home network being taken down with a single, clever maneuver, leaving you and your devices in the dark. This could affect everything connected to your router, making this a critical issue! Patch the router firmware to version V15.03.05.20 or later immediately to close this critical loophole. It's also a good idea to review your device configurations and tighten security settings post-update. You've got this! Follow these steps, and your network will be safer than ever. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09900 · 95.6th percentile
Published
2022-09-23T14:02Z
EPSS history
Timeline
  • 23 SEP 14:02Z
    Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat
    cvelistv5