CVE-2026-5155
Remote Stack-Based Buffer Overflow in Tenda CH22 Parameter Handler
Publication date: 2026-03-30
Last updated on: 2026-04-02
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ch22_firmware | 1.0.0.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Tenda CH22 device, specifically in the function fromAdvSetWan within the /goform/AdvSetWan file of the Parameter Handler component. It is caused by improper handling of the argument wanmode, which leads to a stack-based buffer overflow.
Because of this flaw, an attacker can remotely execute an attack by manipulating the wanmode argument, potentially causing the device to behave unexpectedly or allowing the attacker to execute arbitrary code.
The exploit for this vulnerability has been made public, increasing the risk of it being used maliciously.
How can this vulnerability impact me? :
This vulnerability can have serious impacts because it allows remote attackers to exploit a stack-based buffer overflow in the device.
Potential impacts include unauthorized code execution, which could lead to full compromise of the affected device, disruption of network services, or unauthorized access to network resources.
Given the high CVSS scores (up to 9.0 in version 2.0), the vulnerability is considered critical and could severely affect the security and availability of the device.