CVE-2023-40901

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url…

published August 24, 2023

CVSS
—
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is hiding in the Tenda AC10 router's MAC filter settings! This could be a game changer if you're not careful! 🔥 Think of this like a crowded restaurant where one extra table pushes the whole seating arrangement off balance — too much data in the wrong place can cause chaos in your device's operations! An attacker could exploit this overflow, potentially leading to unexpected behavior or crashes in the router. While the severity is listed as unknown, any malfunctioning device can pose risks to your home network's stability and security!

Put simply

Think of this like a crowded restaurant where one extra table pushes the whole seating arrangement off balance — too much data in the wrong place can cause chaos in your device's operations! This vulnerability occurs via the parameters 'macFilterType' and 'deviceList' at the URL '/goform/setMacFilterCfg', allowing for a stack overflow that could disrupt normal functionality.

What to do

An attacker could exploit this overflow, potentially leading to unexpected behavior or crashes in the router. While the severity is listed as unknown, any malfunctioning device can pose risks to your home network's stability and security! To address this issue, update your Tenda AC10 to the latest firmware version as soon as possible. Regularly check for updates and consider implementing additional network security measures such as changing default credentials and segmenting your devices. You've got this! By staying on top of your updates, you're securing your network like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01266 · 69.5th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url…
    cvelistv5