CVE-2022-25457: Critical severity tenda ac6 firmware vulnerability
Published Mar 18, 2022
·Updated
Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function.
Affected Software
2 affected components
Tenda Ac6 Firmware=15.03.05.09
Tenda AC6
Event History
Mar 18, 2022
CVE Published
via MITRE·08:53 PM
Data Sourced
via MITRE·08:53 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Tenda AC6 v15.03.05.09_multi?
The vulnerability ID for Tenda AC6 v15.03.05.09_multi is CVE-2022-25457.
2
What is the severity of CVE-2022-25457?
The severity of CVE-2022-25457 is critical with a severity value of 9.8.
3
What is the affected software for CVE-2022-25457?
The affected software for CVE-2022-25457 is Tenda AC6 v15.03.05.09_multi firmware.
4
How can the stack overflow vulnerability be exploited?
The stack overflow vulnerability in Tenda AC6 v15.03.05.09_multi can be exploited via the ntpserver parameter in the SetSysTimeCfg function.
5
Is Tenda AC6 v15.03.05.09_multi the only affected version?
Yes, Tenda AC6 v15.03.05.09_multi is the only affected version.