Stack Overflow Vulnerability in Tenda AC9 Router

CVE-2022-25439

Summary

The Tenda AC9 Router, specifically version 15.03.2.21, is susceptible to a stack overflow vulnerability that arises from improper handling of the list parameter in the SetIpMacBind function. This flaw can be exploited by an attacker to potentially execute arbitrary code or disrupt the system's normal operations, emphasizing the importance of prompt updates and robust security practices in IoT devices.

References