CVE-2024-46045

Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function

Medium · published September 13, 2024

CVSS v3.1
5.7
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

⚠️ A stack overflow vulnerability in Tenda CH22’s frmL7PlotForm function could turn your router into a ticking time bomb! 💣 Think of it as a water pipe that can only hold so much pressure. If you keep adding more water without a way to let it out, eventually the pipe bursts, causing a messy leak that can flood your system. An attacker could exploit this vulnerability to crash your router, interrupting your network connection and leaving you without internet access. While it's not an immediate threat of data theft, a device crash can disrupt your home or office connectivity, leading to inconvenient downtime.

Put simply

Think of it as a water pipe that can only hold so much pressure. If you keep adding more water without a way to let it out, eventually the pipe bursts, causing a messy leak that can flood your system. The vulnerability stems from improper handling of input in the frmL7PlotForm function, allowing for stack overflow which can compromise the device's stability and potentially lead to denial of service.

What to do

An attacker could exploit this vulnerability to crash your router, interrupting your network connection and leaving you without internet access. While it's not an immediate threat of data theft, a device crash can disrupt your home or office connectivity, leading to inconvenient downtime. To protect your network, update the Tenda CH22 firmware to version 1.0.0.7 or later immediately. Additionally, consider monitoring your router logs for unusual activity to catch any potential exploits early. You've got this! Follow these steps to secure your router and keep your network running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00579 · 46.9th percentile
Published
2024-09-13T00:00Z
EPSS history
Timeline
  • 13 SEP 00:00Z
    Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function
    cvelistv5