CVE-2022-43107

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function

Critical · published November 3, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the Tenda AC23 could let attackers run wild, impacting your network like a rogue wave tossing a ship off course! 🔥 Think of it like a clogged drain — a little overflow can cause a flood! In this case, the time parameter in the setSmartPowerManagement function can lead to an overwhelming amount of data, causing your system to crash and allowing attackers to slip through the cracks. An attacker could exploit this vulnerability to execute arbitrary code, which means they could take control of your router and gain access to everything connected to it. Imagine them snooping on your data, rerouting your traffic, or even shutting down your entire network! It's an absolute nightmare scenario!

Put simply

Think of it like a clogged drain — a little overflow can cause a flood! In this case, the time parameter in the setSmartPowerManagement function can lead to an overwhelming amount of data, causing your system to crash and allowing attackers to slip through the cracks. This vulnerability occurs due to a stack overflow in the setSmartPowerManagement function when processing the time parameter, which could allow attackers to inject malicious code and compromise the device.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, which means they could take control of your router and gain access to everything connected to it. Imagine them snooping on your data, rerouting your traffic, or even shutting down your entire network! It's an absolute nightmare scenario! Patch your Tenda AC23 router immediately to the latest firmware version to resolve this issue. If you can't update right away, consider disabling the Smart Power Management feature as a temporary stopgap. Always ensure you regularly check for firmware updates! You've got this! By taking these steps, you can secure your network and keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00992 · 62.2th percentile
Published
2022-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function
    cvelistv5