CVE-2022-43108

Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function

Critical · published November 3, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

🔥 A single malformed parameter can trigger a stack overflow! The Tenda AC23 router's firewallEn parameter has a sneaky exploit waiting to spring into action. 😱 Think of it like a crowded elevator that's miscalibrated; if too many people pile in, the whole system can crash. In this case, the firewall function can't handle the load, leading to a complete breakdown. An attacker could easily exploit this vulnerability to crash the router, causing a total service disruption. This could leave your network wide open, making it a playground for unauthorized access and attacks! It's absolutely devastating for your security!

Put simply

Think of it like a crowded elevator that's miscalibrated; if too many people pile in, the whole system can crash. In this case, the firewall function can't handle the load, leading to a complete breakdown. The Tenda AC23 contains a stack overflow in the formSetFirewallCfg function triggered by the firewallEn parameter, allowing attackers to crash the device's firmware or execute arbitrary code.

What to do

An attacker could easily exploit this vulnerability to crash the router, causing a total service disruption. This could leave your network wide open, making it a playground for unauthorized access and attacks! It's absolutely devastating for your security! Patch your Tenda AC23 to the latest version immediately! Check your network for any signs of abnormal behavior and consider changing default configurations to enhance your security. Act fast to safeguard your devices! You've got this! Stay vigilant and follow these steps to keep your network secure. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00992 · 62.2th percentile
Published
2022-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function
    cvelistv5