CVE-2022-40853

Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set

Critical · published September 23, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the Tenda AC15 router can turn your home network into a hacker's playground! 🔥 Think of your router as a busy restaurant. If it tries to take in too many orders without checking the capacity, it could lead to a kitchen disaster — too many plates crashing down at once! An attacker could exploit this stack overflow to execute malicious code, potentially gaining full control over your router. This means they could intercept your internet traffic, snoop on sensitive data, and wreak havoc on your home network — pretty alarming, right?

Put simply

Think of your router as a busy restaurant. If it tries to take in too many orders without checking the capacity, it could lead to a kitchen disaster — too many plates crashing down at once! This critical vulnerability allows for a stack overflow via the list parameter at /goform/fast_setting_wifi_set, which can be triggered by sending specially crafted requests to the router.

What to do

An attacker could exploit this stack overflow to execute malicious code, potentially gaining full control over your router. This means they could intercept your internet traffic, snoop on sensitive data, and wreak havoc on your home network — pretty alarming, right? Immediate action is crucial! Update your Tenda AC15 router firmware to at least version V15.03.05.20 to patch this vulnerability. Additionally, consider changing your default passwords and enabling network security features to further protect your device. You've got this! Stay vigilant and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.3th percentile
Published
2022-09-23T13:59Z
EPSS history
Timeline
  • 23 SEP 13:59Z
    Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set
    cvelistv5