CVE-2023-25217

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

🚨 A single crafted payload can trigger a stack overflow in Tenda's AC5 router, turning your device into a no-show! 🔥 Think of this like a traffic jam caused by a single car blocking the intersection — suddenly, everything grinds to a halt, and no one can get through. The formWifiBasicSet function is the road that leads to a complete standstill in your network! An attacker can exploit this vulnerability to launch a Denial of Service (DoS) attack, causing your router to crash and leaving your network offline. Even worse, they could potentially execute arbitrary code, giving them control over your device and access to your network. That's an absolutely devastating scenario for any home or office!

Put simply

Think of this like a traffic jam caused by a single car blocking the intersection — suddenly, everything grinds to a halt, and no one can get through. The formWifiBasicSet function is the road that leads to a complete standstill in your network! The stack overflow in the formWifiBasicSet function allows an attacker to send specially crafted data that overflows the buffer, causing the device to crash or execute unintended commands.

What to do

An attacker can exploit this vulnerability to launch a Denial of Service (DoS) attack, causing your router to crash and leaving your network offline. Even worse, they could potentially execute arbitrary code, giving them control over your device and access to your network. That's an absolutely devastating scenario for any home or office! Immediately patch Tenda AC5 routers to the latest firmware version. Regularly check for updates and change default settings to enhance security. Consider implementing additional firewall rules to mitigate the risk until the patch is applied. You've got this! Stay vigilant and follow these steps to keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.2th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function
    cvelistv5