CVE-2023-40891

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg

published August 24, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is hiding in the Tenda AC8 firmware, waiting for the right moment! Think of it like a restaurant with a menu item that allows orders larger than the kitchen can handle — too many ingredients and it just overflows, causing chaos in the kitchen! If exploited, this stack overflow could lead to a denial of service, leaving your router ineffective and your internet connection kaput! Imagine being cut off from the digital world when you need it the most — absolutely devastating!

Put simply

Think of it like a restaurant with a menu item that allows orders larger than the kitchen can handle — too many ingredients and it just overflows, causing chaos in the kitchen! This vulnerability occurs when the firewallEn parameter in the SetFirewallCfg endpoint is fed more data than the stack can accommodate, which can cause the system to crash.

What to do

If exploited, this stack overflow could lead to a denial of service, leaving your router ineffective and your internet connection kaput! Imagine being cut off from the digital world when you need it the most — absolutely devastating! To address this, upgrade your Tenda AC8 firmware to the latest version that includes the fix for this vulnerability. Regularly check for updates to ensure you're running the most secure version! You've got this! With a quick firmware update, your router will be back to being a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg
    cvelistv5