CVE-2023-27019

Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function

Critical ยท published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

๐Ÿšจ A single crafted payload can trigger a devastating stack overflow in Tenda AC10 routers, turning your network into a virtual ghost town! ๐Ÿ”ฅ Think of it like a restaurant where one bad order causes the entire kitchen to shut down, leaving customers hungry and frustrated. This vulnerability can cause a Denial of Service (DoS) that halts your router's functionality, or worse, allow an attacker to run malicious code at will! An attacker could exploit this vulnerability to crash the router, making your internet access vanish in an instant โ€” and who doesn't love their Wi-Fi? If left unaddressed, it opens the door to unauthorized control, leading to potential data breaches or further network compromises.

Put simply

Think of it like a restaurant where one bad order causes the entire kitchen to shut down, leaving customers hungry and frustrated. This vulnerability can cause a Denial of Service (DoS) that halts your router's functionality, or worse, allow an attacker to run malicious code at will! The vulnerability, found in the sub_458FBC function, allows for a stack overflow, which can be exploited to gain control or disrupt operations of the Tenda AC10 router by sending a specially crafted input.

What to do

An attacker could exploit this vulnerability to crash the router, making your internet access vanish in an instant โ€” and who doesn't love their Wi-Fi? If left unaddressed, it opens the door to unauthorized control, leading to potential data breaches or further network compromises. To protect your network, update your Tenda AC10 to the latest firmware version immediately. Regularly check for updates and consider implementing additional security measures, such as strong passwords and network segmentation. ๐Ÿ›ก๏ธ You got this! By following these steps, you'll keep your network safe and sound. ๐ŸŒŸ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01069 ยท 64.5th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function
    cvelistv5