CVE-2023-40892

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi

published August 24, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in the Tenda AC8's scheduling parameters! An attacker could potentially exploit the '/goform/openSchedWifi' route with the right inputs, causing a heap of trouble! Think of it like a traffic jam caused by too many cars trying to squeeze through a single intersection at once—too much input leads to a system crash, leaving everything gridlocked! If exploited, this vulnerability could lead to unexpected behavior or crashes in your device, disrupting WiFi access and potentially exposing the network to other risks. While the severity is labeled as unknown, it's always best to err on the side of caution when your device is at stake.

Put simply

Think of it like a traffic jam caused by too many cars trying to squeeze through a single intersection at once—too much input leads to a system crash, leaving everything gridlocked! This vulnerability arises from a stack overflow in the parameters 'schedStartTime' and 'schedEndTime', allowing an attacker to input excessive data, which can disrupt the normal operation of the device.

What to do

If exploited, this vulnerability could lead to unexpected behavior or crashes in your device, disrupting WiFi access and potentially exposing the network to other risks. While the severity is labeled as unknown, it's always best to err on the side of caution when your device is at stake. To remediate, update your Tenda AC8 router to the latest firmware version as soon as it's released. Also, consider disabling any unnecessary scheduling features until a patch is confirmed to avoid potential exploitation. You've got this! By staying proactive and updating your devices, you're bolstering your security like a true hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi
    cvelistv5