CVE-2023-37711

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function

published July 10, 2023

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in the Tenda AC1206 and AC10 routers! This flaw in the saveParentControlInfo function could let attackers throw a wrench in your network security. 🔥 Think of it as a crowded elevator where one extra person pushes the limits — if not managed well, it could crash under the pressure. In this case, a malicious input could overflow the capacity, disrupting normal operations. If exploited, this vulnerability could lead to unexpected behavior in the router, potentially allowing attackers to gain unauthorized access or disrupt network functions, making your home network a playground for mischief-making hackers. We definitely don’t want that!

Put simply

Think of it as a crowded elevator where one extra person pushes the limits — if not managed well, it could crash under the pressure. In this case, a malicious input could overflow the capacity, disrupting normal operations. This stack overflow vulnerability occurs in the deviceId parameter of the saveParentControlInfo function, which means overly large inputs can corrupt memory, leading to unexpected and dangerous behavior.

What to do

If exploited, this vulnerability could lead to unexpected behavior in the router, potentially allowing attackers to gain unauthorized access or disrupt network functions, making your home network a playground for mischief-making hackers. We definitely don’t want that! To safeguard your devices, immediately update your Tenda AC1206 and AC10 routers to the latest firmware version. Regularly check for firmware updates moving forward to ensure ongoing protection. Stay vigilant! This is fixable! Update your firmware and you'll have your network back in secure shape in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01153 · 66.7th percentile
Published
2023-07-10T00:00Z
EPSS history
Timeline
  • 10 JUL 00:00Z
    Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function
    cvelistv5