CVE-2022-25556

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21

Description A stack overflow was discovered in the function sub 42E328, allowing attackers to cause a Denial of Service (DoS) via the list parameter.

Recommendations For Tenda AX12 version 22.03.01.21, consider disabling the sub 42E328 function as a temporary workaround until a patch is available. Restrict access to the list parameter in the affected API endpoint to minimize the risk of exploitation.