CVE-2023-25213

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

🚨 A stack overflow in Tenda AC5 means a single crafted payload could crash the whole system, leaving you without your Wi-Fi lifeline! 🔥 Think of it as an overstuffed delivery truck that can’t fit its cargo — one wrong box and it gets stuck, blocking the road for everyone else. This vulnerability lets attackers send that wrong box, causing a total traffic jam! An attacker exploiting this vulnerability could create a Denial of Service (DoS), effectively knocking out your device and leaving your network vulnerable. They may even execute arbitrary code, allowing full control over your system. In a world where connectivity is essential, this could be absolutely devastating!

Put simply

Think of it as an overstuffed delivery truck that can’t fit its cargo — one wrong box and it gets stuck, blocking the road for everyone else. This vulnerability lets attackers send that wrong box, causing a total traffic jam! The vulnerability arises from a stack overflow in the check_param_changed function in Tenda AC5 firmware, allowing attackers to manipulate memory and execute unintended commands.

What to do

An attacker exploiting this vulnerability could create a Denial of Service (DoS), effectively knocking out your device and leaving your network vulnerable. They may even execute arbitrary code, allowing full control over your system. In a world where connectivity is essential, this could be absolutely devastating! Update to the latest firmware version immediately to patch this vulnerability. If you haven't already, disable remote management options to minimize exposure to attacks. Regularly check for updates to keep your device secure! You've got this! Follow these steps to secure your network, and you'll be back online in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.2th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function
    cvelistv5