CVE-2022-25547: High severity tenda ax1806 firmware vulnerability

Published Mar 9, 2022

Updated

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter.

Affected Software

2 affected components

Tenda Ax1806 Firmware=1.0.0.1

Tenda AX1806

Event History

Mar 9, 2022

CVE Published

via MITRE·06:27 PM

Data Sourced

via MITRE·06:27 PM

Description

Frequently Asked Questions

What is CVE-2022-25547?

CVE-2022-25547 is a vulnerability found in Tenda AX1806 v1.0.0.1, allowing attackers to cause a Denial of Service (DoS) through a stack overflow in the fromSetSysTime function.

How severe is CVE-2022-25547?

CVE-2022-25547 has a severity rating of 7.5 (High).

What is the affected software for CVE-2022-25547?

The affected software for CVE-2022-25547 is Tenda Ax1806 Firmware version 1.0.0.1.

How can attackers exploit CVE-2022-25547?

Attackers can exploit CVE-2022-25547 by sending a specially crafted time parameter, causing a stack overflow and leading to a Denial of Service (DoS) on the Tenda AX1806 device.

Is Tenda AX1806 vulnerable to CVE-2022-25547?

Yes, Tenda AX1806 firmware version 1.0.0.1 is vulnerable to CVE-2022-25547.