CVE-2023-40843

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."

published August 30, 2023

CVSS
β€”
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow hides in Tenda AC6 firmware! This vulnerability can be triggered via the function "sub_73004," making it a potential playground for attackers. πŸ” Think of it as a crowded restaurant where someone keeps adding extra chairs at a table until the whole thing tips over β€” that's exactly what happens when input isn't properly controlled, leading to a crash! An attacker could exploit this vulnerability to cause unexpected behavior, including crashes or possibly executing arbitrary code. While currently marked as unknown severity, the risk of a full takeover is always lurking when buffers overflow. 😱

Put simply

Think of it as a crowded restaurant where someone keeps adding extra chairs at a table until the whole thing tips over β€” that's exactly what happens when input isn't properly controlled, leading to a crash! The vulnerability arises in the Tenda AC6 firmware due to improper handling of buffer sizes in the "sub_73004" function, allowing for buffer overflow attacks that may lead to unauthorized actions on the device.

What to do

An attacker could exploit this vulnerability to cause unexpected behavior, including crashes or possibly executing arbitrary code. While currently marked as unknown severity, the risk of a full takeover is always lurking when buffers overflow. 😱 To secure your devices, check for the latest firmware updates and apply them immediately. Stay vigilant and regularly monitor your devices for unusual behavior. Don’t ignore your updates! πŸ”’ This is fixable! Keep your firmware up-to-date to ensure your router stays safe from unwelcome guests. You've got this! πŸ›‘οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00682 Β· 51.9th percentile
Published
2023-08-30T00:00Z
EPSS history
Timeline
  • 30 AUG 00:00Z
    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."
    cvelistv5