CVE-2022-47125

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow lies in the Tenda A15 router — the wrlEn_5g parameter could bring your network to its knees! 🔥 Think of it like a waiter at a restaurant trying to take an order but not stopping the flow of food, leading to a catastrophic kitchen pile-up. This stack overflow means that too much data can be sent, causing everything to crash spectacularly! An attacker could exploit this flaw to crash the router, disrupting your entire network. Imagine your streaming movie freezing mid-scene or, worse, losing all access to your smart home devices. This critical vulnerability could lead to complete service disruption!

Put simply

Think of it like a waiter at a restaurant trying to take an order but not stopping the flow of food, leading to a catastrophic kitchen pile-up. This stack overflow means that too much data can be sent, causing everything to crash spectacularly! The vulnerability involves a stack overflow triggered by the wrlEn_5g parameter in the Tenda A15 router, which allows attackers to send excessive data, overwhelming the memory stack and causing crashes.

What to do

An attacker could exploit this flaw to crash the router, disrupting your entire network. Imagine your streaming movie freezing mid-scene or, worse, losing all access to your smart home devices. This critical vulnerability could lead to complete service disruption! Update your Tenda A15 to version V15.13.08.17 or later immediately. Additionally, review your network settings to ensure there are no open management interfaces accessible from the internet. Don't delay — secure your router today! You've got this! Follow these steps and you'll keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet
    cvelistv5