CVE-2023-40894

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg

published August 24, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in Tenda AC8 routers that could trip up your network configuration. 🚧 Think of this as a restaurant's kitchen overflowing with orders—if a chef doesn't manage the incoming requests, it could lead to a chaotic mess and even a kitchen disaster! An attacker could exploit this overflow to disrupt the router's services, potentially leading to downtime or misconfigurations. While this vulnerability isn't currently known to be exploited, the consequences could still impact your network's stability and performance.

Put simply

Think of this as a restaurant's kitchen overflowing with orders—if a chef doesn't manage the incoming requests, it could lead to a chaotic mess and even a kitchen disaster! This stack overflow occurs via the parameter list at /goform/SetStaticRouteCfg, allowing overly long inputs to overwrite other critical data on the device, leading to unexpected behavior or crashes.

What to do

An attacker could exploit this overflow to disrupt the router's services, potentially leading to downtime or misconfigurations. While this vulnerability isn't currently known to be exploited, the consequences could still impact your network's stability and performance. To mitigate this risk, check for any firmware updates from Tenda and apply them immediately. If your router model is affected, consider disabling unnecessary features or restricting access to sensitive settings until a patch is released. You've got this! Stay vigilant and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg
    cvelistv5