CVE-2023-25220

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

🔥 A critical stack overflow lurking in the Tenda AC5 could leave your network taking an unexpected nap! Think of this vulnerability like a restaurant that overbooks tables, causing chaos in the kitchen when everyone shows up at once — the whole operation grinds to a halt. The add_white_node function is the server that just can't handle the rush, leading to a Denial of Service (DoS) or worse, arbitrary code execution. An attacker could unleash a well-crafted payload that knocks your device offline, leaving your network vulnerable and unresponsive. This isn't just inconvenient; it's absolutely devastating for your operations, potentially giving attackers the keys to your network's castle!

Put simply

Think of this vulnerability like a restaurant that overbooks tables, causing chaos in the kitchen when everyone shows up at once — the whole operation grinds to a halt. The add_white_node function is the server that just can't handle the rush, leading to a Denial of Service (DoS) or worse, arbitrary code execution. This stack overflow in Tenda AC5's add_white_node function allows attackers to overflow the stack, enabling them to execute arbitrary code or trigger a DoS condition when sending specially crafted payloads.

What to do

An attacker could unleash a well-crafted payload that knocks your device offline, leaving your network vulnerable and unresponsive. This isn't just inconvenient; it's absolutely devastating for your operations, potentially giving attackers the keys to your network's castle! Immediately update to the latest firmware version provided by Tenda to patch this vulnerability. Regularly monitor your network for any unusual activity, and consider implementing additional security measures such as firewalls or intrusion detection systems. You've got this! With these steps, you'll fortify your network like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00959 · 61.1th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function
    cvelistv5