CVE-2022-25554: High severity tenda ax1806 firmware vulnerability

Published Mar 9, 2022

Updated

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.

Affected Software

2 affected components

Tenda Ax1806 Firmware=1.0.0.1

Tenda AX1806

Event History

Mar 9, 2022

CVE Published

via MITRE·06:27 PM

Data Sourced

via MITRE·06:27 PM

Description

Frequently Asked Questions

What is CVE-2022-25554?

CVE-2022-25554 is a vulnerability found in Tenda AX1806 v1.0.0.1 firmware that allows attackers to cause a Denial of Service (DoS) via the deviceId parameter.

How severe is CVE-2022-25554?

CVE-2022-25554 has a severity score of 7.5, indicating a high severity.

What is the affected software for CVE-2022-25554?

The affected software for CVE-2022-25554 is Tenda AX1806 v1.0.0.1 firmware.

How can I fix CVE-2022-25554?

To fix CVE-2022-25554, it is recommended to update the Tenda AX1806 firmware to a secure version provided by the vendor.

Where can I find more information about CVE-2022-25554?

You can find more information about CVE-2022-25554 at the following link: [https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/10](https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/10)