CVE-2023-25214

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

🔥 A stack overflow in Tenda AC5 can lead to chaos! Attackers can exploit the `setSchedWifi` function, resulting in a Denial of Service (DoS) or even worse, executing arbitrary code! ⚡ Think of it like a restaurant kitchen that can't handle too many orders at once—if the chef gets overwhelmed, they might accidentally mix up ingredients or just stop cooking altogether! That’s how a stack overflow can disrupt your router’s functionality, causing it to crash or misbehave. If exploited, this vulnerability could allow attackers to bring your network to its knees, halting internet access for all devices connected. They could also potentially execute harmful code, creating a gateway for further attacks. This is absolutely devastating for your home or office security!

Put simply

Think of it like a restaurant kitchen that can't handle too many orders at once—if the chef gets overwhelmed, they might accidentally mix up ingredients or just stop cooking altogether! That’s how a stack overflow can disrupt your router’s functionality, causing it to crash or misbehave. The vulnerability in Tenda AC5 occurs due to a stack overflow in the `setSchedWifi` function, which accepts crafted payloads that can overflow the stack and lead to a DoS or arbitrary code execution.

What to do

If exploited, this vulnerability could allow attackers to bring your network to its knees, halting internet access for all devices connected. They could also potentially execute harmful code, creating a gateway for further attacks. This is absolutely devastating for your home or office security! To mitigate this risk, immediately patch your Tenda AC5 to the latest firmware version released after the vulnerability was disclosed. Regularly check for updates and consider disabling unnecessary features to minimize exposure. 🛡️ You've got this! By following these steps, you’ll keep your network safe and sound. 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function
    cvelistv5