CVE-2023-27014

Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability is hiding within your Tenda AC10, allowing attackers to incapacitate your device or execute their own code. 🔥 Think of this vulnerability like a busy restaurant kitchen where one chef overfills a pot of soup, causing everything to spill over and disrupt the entire operation. This overflow can lead to a catastrophic shutdown of services, much like a kitchen can't function without order! If exploited, an attacker could unleash chaos: your device could crash, leaving you with a Denial of Service (DoS) or worse, unauthorized code could be executed. This could compromise your network security, leaving sensitive information vulnerable and potentially exposing your entire home or business to further attacks. Ouch!

Put simply

Think of this vulnerability like a busy restaurant kitchen where one chef overfills a pot of soup, causing everything to spill over and disrupt the entire operation. This overflow can lead to a catastrophic shutdown of services, much like a kitchen can't function without order! This stack overflow occurs in the sub_46AC38 function, which allows for crafted payloads to overflow the stack, leading to either a system crash or arbitrary code execution.

What to do

If exploited, an attacker could unleash chaos: your device could crash, leaving you with a Denial of Service (DoS) or worse, unauthorized code could be executed. This could compromise your network security, leaving sensitive information vulnerable and potentially exposing your entire home or business to further attacks. Ouch! Immediate action is necessary! Update your Tenda AC10 to the latest firmware version available from the manufacturer to patch this critical vulnerability. Additionally, consider implementing network monitoring to catch any unusual activity that could signal exploitation attempts. 🛡️ You've got this! Just follow these steps, and you'll have your Tenda AC10 locked down in no time. 🦸

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01127 · 66.1th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function
    cvelistv5