CVE-2023-40893

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet

published August 24, 2023

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in the Tenda AC8’s parameter time at /goform/PowerSaveSet! 👀 Think of it like a crowded elevator that suddenly tries to carry too many people — if everyone pushes for space, it might just break down, leaving you all in a jam! If exploited, this vulnerability could lead to unexpected behavior or crashes in your device, causing a complete system failure or a denial of service. While it might not compromise sensitive data, it could leave your home network in a bind.

Put simply

Think of it like a crowded elevator that suddenly tries to carry too many people — if everyone pushes for space, it might just break down, leaving you all in a jam! This stack overflow vulnerability occurs when the input parameter 'time' receives excessive data, allowing an attacker to manipulate the system’s memory. Essentially, it’s like cramming too much information into a small box — it can overflow and cause chaos!

What to do

If exploited, this vulnerability could lead to unexpected behavior or crashes in your device, causing a complete system failure or a denial of service. While it might not compromise sensitive data, it could leave your home network in a bind. Keep an eye out for firmware updates from Tenda that address this issue, and consider regularly checking their support site for patches. It’s also a good practice to limit access to router settings to trusted users only. You've got this! Stay proactive, and keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet
    cvelistv5