CVE-2023-27018

Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

🔥 A sneaky stack overflow in the Tenda AC10 could turn your router into a doorstop! ⚡ Think of it like a restaurant kitchen where a chef keeps piling up orders without checking the capacity. Eventually, the kitchen gets overwhelmed and the whole operation shuts down. That’s exactly what happens here when a crafted payload causes a stack overflow. An attacker could exploit this vulnerability to cause a Denial of Service (DoS), rendering your device completely inoperable. Worse yet, they might even execute arbitrary code, leading to a total compromise of your network — that’s absolutely devastating!

Put simply

Think of it like a restaurant kitchen where a chef keeps piling up orders without checking the capacity. Eventually, the kitchen gets overwhelmed and the whole operation shuts down. That’s exactly what happens here when a crafted payload causes a stack overflow. This stack overflow vulnerability in the sub_45EC1C function of the Tenda AC10 allows attackers to overflow the stack memory by sending specially crafted input, which can result in unexpected behavior or crashes.

What to do

An attacker could exploit this vulnerability to cause a Denial of Service (DoS), rendering your device completely inoperable. Worse yet, they might even execute arbitrary code, leading to a total compromise of your network — that’s absolutely devastating! To protect your network, patch your Tenda AC10 to version V16.03.10.14_cn or later. Additionally, regularly check for firmware updates and review your device configurations to minimize exposure. You've got this! Secure your router today, and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01069 · 64.5th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function
    cvelistv5