CVE-2022-40942

Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time

Critical · published September 28, 2022

CVSS v3.1
9.8
EPSS
9%
Percentile
95.0
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in the Tenda TX3 could let attackers crash your device with a single mismanaged time comparison! 🔥 Think of it as a restaurant where too many orders are sent out in one go, causing the kitchen to overflow and crash under the pressure—no meals can be served! An attacker could exploit this vulnerability to trigger a stack overflow, potentially leading to device crashes and a full denial of service. This could leave your network exposed and vulnerable, making it a serious threat to your home security!

Put simply

Think of it as a restaurant where too many orders are sent out in one go, causing the kitchen to overflow and crash under the pressure—no meals can be served! In Tenda TX3 US_TX3V1.0br_V16.03.13.11, improper handling of time comparisons in the compare_parentcontrol_time function allows for a stack overflow, disrupting normal operations and possibly enabling remote code execution.

What to do

An attacker could exploit this vulnerability to trigger a stack overflow, potentially leading to device crashes and a full denial of service. This could leave your network exposed and vulnerable, making it a serious threat to your home security! Immediately patch your device to the latest firmware version that addresses this vulnerability. Ensure your device settings are configured to reject unexpected inputs and monitor for unusual activity. Don't forget to review your security protocols! You've got this! Follow these steps, and you'll fortify your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.08506 · 95.0th percentile
Published
2022-09-28T14:16Z
EPSS history
Timeline
  • 28 SEP 14:16Z
    Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time
    cvelistv5