Critical · published October 8, 2025
🚨 A remote manipulation of a single argument can lead to memory corruption in Tenda CH22 routers! 🔥 Think of it like a sneaky intruder swapping out important files in a library's catalog system — once they get in, chaos can ensue and the whole system may crash or misbehave. An attacker could exploit this vulnerability to corrupt memory, potentially leading to a complete system failure. This means unauthorized access and control over the router, putting your entire network at risk! Imagine your network being hijacked, leaving your sensitive data vulnerable or even your smart devices compromised.
Think of it like a sneaky intruder swapping out important files in a library's catalog system — once they get in, chaos can ensue and the whole system may crash or misbehave. This vulnerability resides in the `formSafeEmailFilter` function of Tenda CH22 routers, where manipulating the `page` argument results in memory corruption. This flaw can be exploited remotely, allowing attackers to potentially execute malicious actions on the device.
An attacker could exploit this vulnerability to corrupt memory, potentially leading to a complete system failure. This means unauthorized access and control over the router, putting your entire network at risk! Imagine your network being hijacked, leaving your sensitive data vulnerable or even your smart devices compromised. To protect against this critical vulnerability, update your Tenda CH22 router firmware to version 1.0.0.2 or later immediately. Additionally, implement network segmentation and consider disabling remote access if it's not needed to reduce exposure. Regular audits of your network devices can also help monitor for unusual activity. You've got this! Follow these steps and you’ll have your network secured in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tenda/ch22_firmware | all versions | — |