CVE-2023-24166

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet

Critical · published January 26, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

🔥 A single misconfiguration on your Tenda AC18 could lead to a catastrophic buffer overflow! Picture a busy restaurant where a waiter keeps serving way too many dishes on the same table — eventually, it spills over, causing chaos! In this case, the overflow happens when the router tries to handle more data than it can manage, and it can lead to some serious intrusions. An attacker could exploit this vulnerability to inject malicious code, completely taking over the router. This could lead to unauthorized access to your network, allowing intruders to snoop on your data, hijack devices, or even launch attacks on other systems. This is absolutely devastating and must be taken seriously!

Put simply

Picture a busy restaurant where a waiter keeps serving way too many dishes on the same table — eventually, it spills over, causing chaos! In this case, the overflow happens when the router tries to handle more data than it can manage, and it can lead to some serious intrusions. The vulnerability in Tenda AC18 V15.03.05.19 allows for a buffer overflow through improperly validated input in the '/goform/formWifiBasicSet' function. This flaw enables attackers to manipulate the memory allocation, leading to potential remote code execution.

What to do

An attacker could exploit this vulnerability to inject malicious code, completely taking over the router. This could lead to unauthorized access to your network, allowing intruders to snoop on your data, hijack devices, or even launch attacks on other systems. This is absolutely devastating and must be taken seriously! Immediately update your Tenda AC18 router to the latest firmware version that addresses this vulnerability. Regularly audit your network settings to ensure proper configurations and consider changing default credentials. Ignoring this could leave your network wide open! You've got this! Follow these steps to protect your network and secure your router like a true security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01118 · 65.9th percentile
Published
2023-01-26T00:00Z
EPSS history
Timeline
  • 26 JAN 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet
    cvelistv5