CVE-2026-5155: Tenda CH22 Parameter AdvSetWan fromAdvSetWan stack-based overflow
A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5155?
The severity of CVE-2026-5155 is classified as critical due to the potential for a stack-based buffer overflow.
How does CVE-2026-5155 affect Tenda CH22 devices?
CVE-2026-5155 affects Tenda CH22 devices by allowing an attacker to exploit the AdvSetWan function, leading to potential unauthorized code execution.
How do I fix CVE-2026-5155?
To fix CVE-2026-5155, users should update their Tenda CH22 devices to the latest firmware version provided by the manufacturer.
What components are involved in CVE-2026-5155?
CVE-2026-5155 involves the Parameter Handler component and specifically the AdvSetWan function located in the /goform/AdvSetWan file.
What kind of attack can CVE-2026-5155 enable?
CVE-2026-5155 can enable remote code execution attacks due to the stack-based buffer overflow vulnerability.