CVE-2023-27021

Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function

Critical · published April 7, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the Tenda AC10 could let attackers take over or completely crash your network with a simple payload! 🔥 Think of it like a poorly designed amusement park ride where one extra passenger causes the whole ride to shut down, leaving everyone stranded — that’s the potential disaster this vulnerability brings! An attacker could exploit this flaw to execute arbitrary code or trigger a Denial of Service (DoS), essentially bringing your router to its knees. If left unaddressed, it could lead to complete service disruption, affecting all devices connected to your network. Talk about an unexpected ride!

Put simply

Think of it like a poorly designed amusement park ride where one extra passenger causes the whole ride to shut down, leaving everyone stranded — that’s the potential disaster this vulnerability brings! This vulnerability in the formSetFirewallCfg function allows for a stack overflow, making it possible for attackers to send crafted payloads that can execute harmful code or crash the device.

What to do

An attacker could exploit this flaw to execute arbitrary code or trigger a Denial of Service (DoS), essentially bringing your router to its knees. If left unaddressed, it could lead to complete service disruption, affecting all devices connected to your network. Talk about an unexpected ride! To mitigate this risk, immediately update the router firmware to the latest version available. Check the manufacturer's site for security patches related to this CVE and ensure that your firewall configurations are appropriately set. Regularly audit your network for any unusual traffic or changes. 🛡️ You’ve got this! Implement these fixes and you’ll be back in control of your network in no time! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01069 · 64.6th percentile
Published
2023-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function
    cvelistv5