CVE-2023-40846

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998

published August 28, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A crafty buffer overflow lurks in the Tenda AC6! This sneaky flaw in function sub_90998 could open up a world of trouble. 🔥 Think of this vulnerability as a waiter carrying too many plates. If they try to stack on one more, it could cause the whole thing to crash down—just like how this buffer overflow can lead to unpredictable behavior in your router! If exploited, this buffer overflow could allow an attacker to manipulate the router's functions, potentially leading to unauthorized access or control over your network. It's not catastrophic yet, but why risk it?

Put simply

Think of this vulnerability as a waiter carrying too many plates. If they try to stack on one more, it could cause the whole thing to crash down—just like how this buffer overflow can lead to unpredictable behavior in your router! The vulnerability occurs in the Tenda AC6 router's sub_90998 function, where improper handling of input can allow for a buffer overflow, enabling memory corruption or execution of arbitrary code.

What to do

If exploited, this buffer overflow could allow an attacker to manipulate the router's functions, potentially leading to unauthorized access or control over your network. It's not catastrophic yet, but why risk it? To keep your network safe, check for firmware updates from Tenda and ensure you're running the latest version. If you're using the vulnerable version, consider disabling remote management features to limit exposure until a patch is available. Stay vigilant! You’ve got this—keeping your devices secure is a heroic task! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-28T00:00Z
EPSS history
Timeline
  • 28 AUG 00:00Z
    Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998
    cvelistv5