CVE-2023-25216

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow lurking in Tenda routers could unleash chaos! Just a crafted payload is enough to crash the device, leaving your network vulnerable. 🔥 Think of it like a delivery service that overloads its systems with too many packages all at once – suddenly, everything comes to a standstill, and no deliveries happen! That's exactly what a crafted payload can do to your router's performance. If exploited, an attacker could bring your entire network to its knees with a Denial of Service (DoS) attack, disrupting your connection and potentially executing arbitrary code. Imagine losing access to the internet at the most crucial moment – absolutely devastating!

Put simply

Think of it like a delivery service that overloads its systems with too many packages all at once – suddenly, everything comes to a standstill, and no deliveries happen! That's exactly what a crafted payload can do to your router's performance. This stack overflow vulnerability in the Tenda AC5 router's formSetFirewallCfg function allows attackers to craft payloads that can manipulate the stack, leading to crashes or remote code execution.

What to do

If exploited, an attacker could bring your entire network to its knees with a Denial of Service (DoS) attack, disrupting your connection and potentially executing arbitrary code. Imagine losing access to the internet at the most crucial moment – absolutely devastating! Patch your Tenda AC5 to version V15.03.06.29 or later immediately to close this vulnerability. It's crucial to review your firewall configuration and monitor for any suspicious activities on your network. You've got this! Follow these steps to secure your router and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function
    cvelistv5