CVE-2022-40869

Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*"…

Critical · published September 23, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda routers could let attackers control your network! 🔥 Think of it like a waiter at a busy restaurant trying to take too many orders at once — if the system gets overloaded, it might just crash and lead to chaos in the kitchen. That's what this vulnerability does to your router's processing power, leaving it open to malicious commands. An attacker could exploit this stack overflow to crash your router or even take complete control, potentially leading to unauthorized access to your network and sensitive data. It’s absolutely devastating if exploited! Your Wi-Fi could become a playground for intruders, and all it takes is the right crafted input to push the router past its limits.

Put simply

Think of it like a waiter at a busy restaurant trying to take too many orders at once — if the system gets overloaded, it might just crash and lead to chaos in the kitchen. That's what this vulnerability does to your router's processing power, leaving it open to malicious commands. This vulnerability in Tenda AC15 and AC18 routers allows for a stack overflow in the function fromDhcpListClient when handling certain parameters. This unchecked handling could allow attackers to execute arbitrary code remotely, compromising the device.

What to do

An attacker could exploit this stack overflow to crash your router or even take complete control, potentially leading to unauthorized access to your network and sensitive data. It’s absolutely devastating if exploited! Your Wi-Fi could become a playground for intruders, and all it takes is the right crafted input to push the router past its limits. To safeguard your network, update your Tenda router firmware to the latest version immediately. Regularly check for updates beyond just this vulnerability, and consider implementing additional security measures like changing default passwords and enabling network firewalls. You've got this! Stay vigilant, follow these steps, and keep your digital fortress strong! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01469 · 73.5th percentile
Published
2022-09-23T13:32Z
EPSS history
Timeline
  • 23 SEP 13:32Z
    Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter "list*"…
    cvelistv5