CVE-2023-27013

Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda AC10 could turn your router into a brick! 🔥 Think of it like an overstuffed suitcase that just won’t zip — too much data and it all spills out, causing chaos. The get_parentControl_list_Info function is the zipper, and this flaw means an attacker can just keep piling it on until it breaks! If exploited, this vulnerability can lead to a Denial of Service (DoS), knocking your network offline or even allowing an attacker to run arbitrary code on your device. It's like giving someone the keys to your house, letting them do whatever they want, including taking control over your network!

Put simply

Think of it like an overstuffed suitcase that just won’t zip — too much data and it all spills out, causing chaos. The get_parentControl_list_Info function is the zipper, and this flaw means an attacker can just keep piling it on until it breaks! This stack overflow occurs in the get_parentControl_list_Info function, which fails to properly validate input, allowing crafted payloads to overflow the stack and execute malicious code or crash the system.

What to do

If exploited, this vulnerability can lead to a Denial of Service (DoS), knocking your network offline or even allowing an attacker to run arbitrary code on your device. It's like giving someone the keys to your house, letting them do whatever they want, including taking control over your network! It's critical to patch your Tenda AC10 to version V16.03.10.14_cn or higher. Regularly review device configurations and stay updated with manufacturer advisories to keep your network secure. Don’t wait—act now! You've got this! With the right patch, your router can thwart any attacks and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01069 · 64.5th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function
    cvelistv5