CVE-2023-33673

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function

Critical ยท published June 2, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

๐Ÿšจ A single misconfigured parameter can trigger a stack overflow on Tenda AC8V4.0, leading to a critical security risk! ๐Ÿ”ฅ Think of it like a crowded elevator that's just a little too full. If you add one more person, it could cause a serious malfunction, leaving everyone stuck and vulnerable! An attacker could exploit this stack overflow to crash the device or even execute malicious code, compromising your entire network. The potential for chaos is absolutely devastating! ๐Ÿ†˜

Put simply

Think of it like a crowded elevator that's just a little too full. If you add one more person, it could cause a serious malfunction, leaving everyone stuck and vulnerable! The vulnerability arises in the formSetFirewallCfg function, where an unchecked firewallEn parameter allows for excessive data to be processed, leading to stack overflow conditions.

What to do

An attacker could exploit this stack overflow to crash the device or even execute malicious code, compromising your entire network. The potential for chaos is absolutely devastating! ๐Ÿ†˜ Immediately patch your Tenda AC8V4.0 to the latest firmware version V16.03.34.07, ensuring the firewallEn parameter is validated correctly. Regularly review your device configurations for any potential weaknesses. ๐Ÿ›ก๏ธ You've got this! Stay proactive, and you can protect your network effectively! ๐Ÿ’ช๐Ÿผโœจ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01056 ยท 64.1th percentile
Published
2023-06-02T00:00Z
EPSS history
Timeline
  • 02 JUN 00:00Z
    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function
    cvelistv5