CVE-2023-27012

Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow in the Tenda AC10 is a ticking time bomb! With just a crafted payload, attackers can crash your router or run arbitrary code—yikes! 🔥 Think of this vulnerability like a crowded elevator that's suddenly overloaded; one wrong move and it grinds to a halt, leaving everyone stuck. Just like an overloaded elevator, this stack overflow can freeze your network, leaving you stranded! An attacker could exploit this vulnerability to crash your router, resulting in a complete Denial of Service (DoS). This could leave your network completely offline, disrupting not only your internet access but also any connected devices. In the wrong hands, it could become a playground for malicious code execution—an absolute nightmare!

Put simply

Think of this vulnerability like a crowded elevator that's suddenly overloaded; one wrong move and it grinds to a halt, leaving everyone stuck. Just like an overloaded elevator, this stack overflow can freeze your network, leaving you stranded! This stack overflow vulnerability occurs in the setSchedWifi function of certain Tenda AC10 firmware versions. By sending a specially crafted payload, an attacker can manipulate the system's memory and trigger a crash or execute arbitrary code.

What to do

An attacker could exploit this vulnerability to crash your router, resulting in a complete Denial of Service (DoS). This could leave your network completely offline, disrupting not only your internet access but also any connected devices. In the wrong hands, it could become a playground for malicious code execution—an absolute nightmare! Immediately update your Tenda AC10 to the latest firmware version available. Ensure that your device configurations are secure, and regularly check for updates to stay protected against such vulnerabilities. Don't wait—patching is crucial! You've got this! Follow these steps, patch your device, and you'll be back to surfing safely in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01127 · 66.1th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function
    cvelistv5