CVE-2023-40899

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at…

published August 24, 2023

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow lurks in Tenda AC8 that could catch you off guard! Think of this vulnerability like a clogged drain in your home. If the water keeps pouring in without a place to go, the overflow can create a real mess — and that's exactly what could happen in your network when this bug is exploited! An attacker could potentially exploit this overflow to manipulate the router's behavior, leading to unexpected crashes or even unauthorized access to your network. It's a surprisingly sneaky way to disrupt your home network and compromise your digital fortress!

Put simply

Think of this vulnerability like a clogged drain in your home. If the water keeps pouring in without a place to go, the overflow can create a real mess — and that's exactly what could happen in your network when this bug is exploited! This vulnerability arises from a stack overflow caused by improper handling of the parameters 'macFilterType' and 'deviceList' in the '/goform/setMacFilterCfg' endpoint. When these parameters exceed their expected length, they can overwrite adjacent memory, creating risks for system stability and security.

What to do

An attacker could potentially exploit this overflow to manipulate the router's behavior, leading to unexpected crashes or even unauthorized access to your network. It's a surprisingly sneaky way to disrupt your home network and compromise your digital fortress! To safeguard your systems, ensure that you're running the latest firmware version provided by Tenda. Regularly check for updates and consider implementing input validation on your network devices. Your router deserves better than to be left vulnerable! You've got this! Apply these steps, secure your router, and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at…
    cvelistv5