CVE-2022-40860

Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList

Critical ยท published September 23, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

๐Ÿšจ A stack overflow in the Tenda AC15 router is like a water main bursting in your neighborhood โ€” it can flood your network with chaos! ๐Ÿ”ฅ Think of this vulnerability as an overstuffed suitcase that can't zip up. The router's memory gets overwhelmed, leading to potential crashes or unwanted behavior, just like your suitcase spilling its contents all over the airport floor. An attacker could exploit this vulnerability to crash the router or execute arbitrary code, unleashing a wave of chaos across your network. This could lead to unauthorized access, data leaks, or even a complete network shutdown โ€” a nightmare for any home or business user!

Put simply

Think of this vulnerability as an overstuffed suitcase that can't zip up. The router's memory gets overwhelmed, leading to potential crashes or unwanted behavior, just like your suitcase spilling its contents all over the airport floor. The stack overflow vulnerability resides in the function formSetQosBand, specifically at request /goform/SetNetControlList, allowing attackers to overwrite stack memory and potentially execute malicious code.

What to do

An attacker could exploit this vulnerability to crash the router or execute arbitrary code, unleashing a wave of chaos across your network. This could lead to unauthorized access, data leaks, or even a complete network shutdown โ€” a nightmare for any home or business user! Immediately update your Tenda AC15 router to the latest firmware version, which addresses this critical vulnerability. Regularly check for updates and consider changing default settings to enhance security. ๐Ÿ›ก๏ธ You've got this! By taking these steps, you'll be one step closer to securing your network from exploits. ๐ŸŒŸ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01174 ยท 67.3th percentile
Published
2022-09-23T13:47Z
EPSS history
Timeline
  • 23 SEP 13:47Z
    Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList
    cvelistv5