CVE-2022-47115

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in Tenda A15's wepauth parameter can lead to total chaos! 🔥 Think of this as a coffee machine that overflows because someone forgot to adjust the settings — it spills everywhere, potentially ruining everything around it. In the same way, this flaw could let attackers disrupt your network entirely if they exploit it. An attacker could seize control of the device, execute arbitrary code, or crash the router, leading to a complete loss of connectivity. This could mean downtime for your devices, interruptions to your internet activities, and an outright invite for data breaches — all absolutely devastating!

Put simply

Think of this as a coffee machine that overflows because someone forgot to adjust the settings — it spills everywhere, potentially ruining everything around it. In the same way, this flaw could let attackers disrupt your network entirely if they exploit it. This stack overflow vulnerability occurs via the 'wepauth' parameter at /goform/WifiBasicSet, allowing attackers to manipulate memory in a way that could lead to arbitrary code execution.

What to do

An attacker could seize control of the device, execute arbitrary code, or crash the router, leading to a complete loss of connectivity. This could mean downtime for your devices, interruptions to your internet activities, and an outright invite for data breaches — all absolutely devastating! It's crucial to patch your Tenda A15 immediately to version V15.13.07.14 or later to close off this vulnerability. Additionally, review other devices connected to this router to ensure they’re not at risk from this issue. Don’t delay — secure your network today! You've got this! With the right steps, you can turn your router into a fortress. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet
    cvelistv5