CVE-2022-25549: High severity tenda ax1806 firmware vulnerability

Published Mar 9, 2022

Updated

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsEn parameter.

Affected Software

2 affected components

Tenda Ax1806 Firmware=1.0.0.1

Tenda AX1806

Event History

Mar 9, 2022

CVE Published

via MITRE·06:27 PM

Data Sourced

via MITRE·06:27 PM

Description

Frequently Asked Questions

What is CVE-2022-25549?

CVE-2022-25549 is a vulnerability found in Tenda AX1806 v1.0.0.1 firmware that allows attackers to cause a Denial of Service (DoS) through a stack overflow in the function formSetSysToolDDNS.

What is the severity of CVE-2022-25549?

The severity of CVE-2022-25549 is high, with a CVSS score of 7.5.

How does CVE-2022-25549 affect Tenda AX1806?

CVE-2022-25549 affects Tenda AX1806 v1.0.0.1 firmware, allowing attackers to perform a Denial of Service (DoS) attack via the ddnsEn parameter.

How can I fix CVE-2022-25549?

There is currently no official patch or update available for CVE-2022-25549. It is recommended to contact Tenda or the vendor for further guidance on mitigating this vulnerability.

Is Tenda AX1806 v1.0.0.1 vulnerable to CVE-2022-25549?

Yes, Tenda AX1806 v1.0.0.1 firmware is affected and vulnerable to CVE-2022-25549.