CVE-2023-40904

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at…

Critical · published August 24, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability lurking in the Tenda AC10 could turn your home network into a hacker's playground! Think of it like a crowded restaurant where one table keeps ordering too many dishes, causing chaos and spills everywhere. This overflow allows an attacker to mess with your router's settings, just as a mischievous diner could wreak havoc on an evening out. An attacker could exploit this vulnerability to crash your router or, even worse, gain complete control over it! This means they could manipulate your network traffic, steal sensitive information, or even launch attacks on devices connected to your network. The potential consequences are absolutely devastating!

Put simply

Think of it like a crowded restaurant where one table keeps ordering too many dishes, causing chaos and spills everywhere. This overflow allows an attacker to mess with your router's settings, just as a mischievous diner could wreak havoc on an evening out. This stack overflow occurs specifically through the parameters `macFilterType` and `deviceList` at `/goform/setMacFilterCfg`, allowing an attacker to send malicious input that exceeds buffer limits, leading to unauthorized access or service disruption.

What to do

An attacker could exploit this vulnerability to crash your router or, even worse, gain complete control over it! This means they could manipulate your network traffic, steal sensitive information, or even launch attacks on devices connected to your network. The potential consequences are absolutely devastating! Immediately update your Tenda AC10 to the patch version that addresses this vulnerability. Review access controls and ensure that your router's firmware is always up-to-date to protect against similar issues in the future. Don't forget to regularly check for security updates! You've got this! By taking these steps, you can keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00928 · 60.2th percentile
Published
2023-08-24T00:00Z
EPSS history
Timeline
  • 24 AUG 00:00Z
    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at…
    cvelistv5