CVE-2023-25219

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

🔥 A single crafted payload is capable of exploiting the Tenda AC5, triggering a stack overflow that could completely bring down your device! Think of it like a waiter at a restaurant who accidentally spills an entire tray of drinks all over the kitchen floor, causing chaos and preventing anyone from getting their meals — that’s what this DoS attack does to your router! An attacker could exploit this vulnerability to crash the device, resulting in a Denial of Service, or even execute malicious code. This could leave your network vulnerable and entirely unresponsive, potentially exposing sensitive data and disrupting your daily life.

Put simply

Think of it like a waiter at a restaurant who accidentally spills an entire tray of drinks all over the kitchen floor, causing chaos and preventing anyone from getting their meals — that’s what this DoS attack does to your router! The vulnerability arises from a stack overflow in the fromDhcpListClient function, allowing an attacker to send a specially crafted input that can manipulate the device's memory and lead to unexpected behavior.

What to do

An attacker could exploit this vulnerability to crash the device, resulting in a Denial of Service, or even execute malicious code. This could leave your network vulnerable and entirely unresponsive, potentially exposing sensitive data and disrupting your daily life. Patch your Tenda AC5 immediately to version V15.03.06.29 or later to protect against this critical vulnerability. Regularly check for firmware updates and change default credentials to strengthen security. You've got this! Secure your device and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.2th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function
    cvelistv5