Stack Overflow Vulnerability in Tenda A15 Router

CVE-2022-47125

Summary

The Tenda A15 router, specifically version V15.13.07.13, is susceptible to a stack overflow vulnerability triggered by the wrlEn_5g parameter at the /goform/WifiBasicSet endpoint. An attacker could exploit this weakness, potentially leading to unauthorized access or execution of arbitrary code, posing a significant risk to users. It is crucial for Tenda A15 users to review their device configurations and apply any available security updates to mitigate this vulnerability.

References