CVE-2023-38931

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28…

published August 7, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A stack overflow in Tenda AC routers could cause unexpected behavior, like a suitcase overflowing when you try to pack too much! 🧳 Think of it as a hotel room where the cleaning staff keeps adding more and more furniture without checking for space. Eventually, the room bursts at the seams, causing chaos! If exploited, this stack overflow could allow an attacker to manipulate the device's operations or even crash it. While it’s not currently known to be exploited in the wild, the potential for mischief is absolutely devastating!

Put simply

Think of it as a hotel room where the cleaning staff keeps adding more and more furniture without checking for space. Eventually, the room bursts at the seams, causing chaos! The vulnerability exists in the setaccount function, where the list parameter can be manipulated to trigger a stack overflow, disrupting normal operations of the router.

What to do

If exploited, this stack overflow could allow an attacker to manipulate the device's operations or even crash it. While it’s not currently known to be exploited in the wild, the potential for mischief is absolutely devastating! To safeguard your network, update your Tenda AC devices to the latest firmware version as soon as it’s available. Regularly check for updates, and consider changing default settings to add an extra layer of security. 🛡️ You've got this! Stay vigilant and keep that network secure! 💪

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-07T00:00Z
EPSS history
Timeline
  • 07 AUG 00:00Z
    Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28…
    cvelistv5