CVE-2023-25210

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

🔥 A stack overflow lurking in Tenda AC5 could turn your router into an unresponsive brick! Imagine an attacker sending a carefully crafted message that wreaks havoc on your device! Think of it like a restaurant that overbooks tables. When too many guests arrive at the same time, chaos ensues—orders get lost, and the staff can’t handle the rush. This stack overflow allows a malicious user to overload the router's processing, leading to a Denial of Service. An attacker could exploit this vulnerability to execute arbitrary code or simply crash your device, leaving your network vulnerable and inaccessible. The consequences could range from losing your internet connection to exposing sensitive data if they gain control. Talk about a recipe for disaster!

Put simply

Think of it like a restaurant that overbooks tables. When too many guests arrive at the same time, chaos ensues—orders get lost, and the staff can’t handle the rush. This stack overflow allows a malicious user to overload the router's processing, leading to a Denial of Service. The vulnerability arises within the fromSetSysTime function, allowing attackers to trigger a stack overflow through a crafted payload. This can lead to denial-of-service conditions or remote code execution, undermining system stability and security.

What to do

An attacker could exploit this vulnerability to execute arbitrary code or simply crash your device, leaving your network vulnerable and inaccessible. The consequences could range from losing your internet connection to exposing sensitive data if they gain control. Talk about a recipe for disaster! To protect your network, immediately update your Tenda AC5 to the latest firmware version that addresses this vulnerability. Regularly check for updates and consider reconfiguring your device settings to enhance security. Don't wait—secure your router today! You can tackle this! Follow the above steps and keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function
    cvelistv5