CVE-2023-33675

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function

Critical · published June 2, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in the Tenda AC8V4.0 can be exploited through a single, sneaky time parameter! 🔥 Think of it as a crowded elevator where one extra person pushes the limit, causing the whole system to jam — once that floor gets hit, everything grinds to a halt! An attacker could leverage this flaw to crash the router, interrupting your internet service and potentially allowing them to gain unauthorized access to sensitive configurations. This could lead to total control over your network, making it absolutely devastating!

Put simply

Think of it as a crowded elevator where one extra person pushes the limit, causing the whole system to jam — once that floor gets hit, everything grinds to a halt! This stack overflow occurs in the get_parentControl_list_Info function and can be triggered by manipulating the time parameter, leading to potential code execution and denial of service.

What to do

An attacker could leverage this flaw to crash the router, interrupting your internet service and potentially allowing them to gain unauthorized access to sensitive configurations. This could lead to total control over your network, making it absolutely devastating! Immediate action is crucial! Patch your Tenda AC8V4.0 device to the latest firmware version as specified by the vendor, and monitor your logs for any unusual activity. Don’t forget to change default passwords and harden your network settings! You’ve got this! Secure your device today and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01211 · 68.2th percentile
Published
2023-06-02T00:00Z
EPSS history
Timeline
  • 02 JUN 00:00Z
    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function
    cvelistv5