CVE-2022-43104

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function

Critical · published November 3, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

🚨 A single malicious request could lead to a stack overflow in Tenda AC23 routers! This vulnerability lies in the wpapsk_crypto parameter, making exploitation alarmingly easy! 🔥 Think of it like a restaurant kitchen where a chef is so focused on one order that they overstuff a dish, causing the whole kitchen to spill over with chaos. This stack overflow can disrupt normal operations, much like a messy kitchen distracts everyone from serving customers! An attacker could potentially crash the device or even execute arbitrary code, opening the door to full control of the router. This means they could intercept sensitive data, redirect traffic, or completely disable the network. The consequences could be absolutely devastating for users relying on their internet connection!

Put simply

Think of it like a restaurant kitchen where a chef is so focused on one order that they overstuff a dish, causing the whole kitchen to spill over with chaos. This stack overflow can disrupt normal operations, much like a messy kitchen distracts everyone from serving customers! The vulnerability in Tenda AC23 stems from a stack overflow in the fromSetWirelessRepeat function, triggered by the wpapsk_crypto parameter. This oversight allows an attacker to manipulate memory and potentially execute malicious code.

What to do

An attacker could potentially crash the device or even execute arbitrary code, opening the door to full control of the router. This means they could intercept sensitive data, redirect traffic, or completely disable the network. The consequences could be absolutely devastating for users relying on their internet connection! Patch your router immediately to the latest firmware version provided by Tenda to close this vulnerability. Additionally, consider changing your Wi-Fi password and review network settings to enhance security. Regularly check for firmware updates to stay protected! You've got this! By taking these steps, you’ll be one step closer to securing your network and achieving security hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01013 · 62.9th percentile
Published
2022-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function
    cvelistv5