CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url…

published August 30, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking at the Wi-Fi setup! The Tenda AC7 and AC9 routers are vulnerable through the SSID parameter, which could lead to some unexpected consequences. 🚨 Think of it like a restaurant where the chef is so focused on the latest special that they forget to check the inventory — overloading the ingredient list can lead to a kitchen disaster! In this case, the router gets overwhelmed with data it can't handle. An attacker could potentially crash the router or cause other erratic behavior, leaving your network exposed. While it's not currently known to be exploited, the implications of a stack overflow could lead to unauthorized access or a complete network outage if someone decides to take advantage.

Put simply

Think of it like a restaurant where the chef is so focused on the latest special that they forget to check the inventory — overloading the ingredient list can lead to a kitchen disaster! In this case, the router gets overwhelmed with data it can't handle. This vulnerability occurs in the Tenda AC7 and AC9 routers when the SSID parameter is improperly handled, allowing an attacker to send excessive data that causes the stack to overflow.

What to do

An attacker could potentially crash the router or cause other erratic behavior, leaving your network exposed. While it's not currently known to be exploited, the implications of a stack overflow could lead to unauthorized access or a complete network outage if someone decides to take advantage. To mitigate this risk, patch your Tenda routers to the latest firmware version as soon as it's available. Regularly check the manufacturer's website for updates and consider changing router settings to minimize exposure to external requests. You’re on the right track to securing your network! Stay vigilant, keep those routers patched, and you’ll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-30T00:00Z
EPSS history
Timeline
  • 30 AUG 00:00Z
    Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url…
    cvelistv5