CVE-2023-24164

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318

Critical Β· published January 26, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

🚨 A buffer overflow in Tenda AC18 could turn your router into a hacker’s playground! πŸ“‘ Think of it like a delivery truck overflowing with packages that spill out and block the street β€” it disrupts traffic and lets anyone grab what they want without checking IDs. This bug does just that, granting attackers unexpected access! An attacker could exploit this vulnerability to execute arbitrary code, essentially hijacking your router and controlling your network. This means they might intercept your data, redirect traffic, or even take down your internet connection β€” absolutely devastating! πŸ”₯

Put simply

Think of it like a delivery truck overflowing with packages that spill out and block the street β€” it disrupts traffic and lets anyone grab what they want without checking IDs. This bug does just that, granting attackers unexpected access! The buffer overflow occurs in the router's handling of requests to /goform/FUN_000c2318, allowing attackers to craft inputs that exceed the intended buffer size, leading to unauthorized code execution.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, essentially hijacking your router and controlling your network. This means they might intercept your data, redirect traffic, or even take down your internet connection β€” absolutely devastating! πŸ”₯ Immediate action is crucial! Update the firmware of your Tenda AC18 to the latest version to patch this vulnerability. Additionally, consider reviewing your network configurations and user access rights to strengthen overall security. πŸ›‘οΈ You've got this! By taking these steps, you'll be one step closer to securing your network! πŸ’ͺπŸΌπŸ”’

The record
Technical detail
CVSS v3.1
9.8 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01001 Β· 62.5th percentile
Published
2023-01-26T00:00Z
EPSS history
Timeline
  • 26 JAN 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318
    cvelistv5