CVE-2022-43105

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function

Critical · published November 3, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

🔥 A stack overflow lurks in the Tenda AC23, just waiting for an unsuspecting user to trip over the shareSpeed parameter! Think of it like a crowded elevator that can only fit a certain number of people — if you try to cram too many in at once, it’s going to crash! This overflow happens when the system can’t handle excessive data, leading to a potential meltdown. An attacker could exploit this stack overflow to take control of your router, allowing them to execute any code they want! This could mean altering settings, stealing personal information, or even launching attacks on other devices in your network — absolutely devastating!

Put simply

Think of it like a crowded elevator that can only fit a certain number of people — if you try to cram too many in at once, it’s going to crash! This overflow happens when the system can’t handle excessive data, leading to a potential meltdown. This vulnerability occurs in the fromSetWifiGusetBasic function, where improper handling of the shareSpeed parameter leads to a stack overflow, potentially enabling an attacker to execute arbitrary code.

What to do

An attacker could exploit this stack overflow to take control of your router, allowing them to execute any code they want! This could mean altering settings, stealing personal information, or even launching attacks on other devices in your network — absolutely devastating! Patch your Tenda AC23 router immediately to the latest firmware version V16.03.07.46_cn to close this gap! If you can, disable remote management to reduce the attack surface until you’ve done your updates. Don’t forget to review your network settings for additional security measures! You've got this! By following these steps, you're taking charge of your network security like a true hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00992 · 62.2th percentile
Published
2022-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function
    cvelistv5