CVE-2023-33670

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function

Critical · published June 2, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in the Tenda AC8V4.0 could let attackers take full control just by manipulating the time parameter! 🔥 Think of it like a restaurant that can't handle too many orders at once. If a diner sends in too many special requests at the same time, the kitchen could get overwhelmed and serve up something unsafe—like a recipe gone wrong! An attacker could exploit this vulnerability to crash the device or, even worse, execute malicious code. This could result in total takeover of your router, allowing them to eavesdrop on your network and compromise connected devices—absolutely devastating!

Put simply

Think of it like a restaurant that can't handle too many orders at once. If a diner sends in too many special requests at the same time, the kitchen could get overwhelmed and serve up something unsafe—like a recipe gone wrong! This stack overflow occurs in the sub_4a79ec function when an attacker inputs an oversized time parameter, causing the system to behave unpredictably and potentially execute arbitrary code.

What to do

An attacker could exploit this vulnerability to crash the device or, even worse, execute malicious code. This could result in total takeover of your router, allowing them to eavesdrop on your network and compromise connected devices—absolutely devastating! Upgrade your Tenda AC8V4.0 firmware to the latest version immediately to patch this vulnerability. Regularly check for updates, and consider changing your device settings to limit exposure to potential exploits! You've got this! Stay vigilant and keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01056 · 64.2th percentile
Published
2023-06-02T00:00Z
EPSS history
Timeline
  • 02 JUN 00:00Z
    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function
    cvelistv5