CVE-2023-41554

Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet

published August 30, 2023

CVSS
โ€”
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

โš ๏ธ A sneaky stack overflow is lurking in Tenda AC9 routers! If you send a tricky parameter to '/goform/WifiExtraSet', you might just crash the whole system. ๐Ÿ”ฅ Think of it like a restaurant where one overly complicated order causes the kitchen to collapse under pressure, leaving everyone hungry and in chaos. This overflow could lead to a denial of service, impacting the availability of your network. If exploited, this vulnerability could lead to unexpected crashes or degraded performance of your router, leaving your network vulnerable and potentially causing disruptions in your daily online activities. It might not be a smooth ride for your internet connection!

Put simply

Think of it like a restaurant where one overly complicated order causes the kitchen to collapse under pressure, leaving everyone hungry and in chaos. This overflow could lead to a denial of service, impacting the availability of your network. This vulnerability exists due to a stack overflow in the wpapsk_crypto parameter, which can be triggered through crafted requests to the '/goform/WifiExtraSet' endpoint. This flaw allows attackers to disrupt normal operations of the router, causing it to crash or behave unpredictably.

What to do

If exploited, this vulnerability could lead to unexpected crashes or degraded performance of your router, leaving your network vulnerable and potentially causing disruptions in your daily online activities. It might not be a smooth ride for your internet connection! To mitigate this issue, update your Tenda AC9 router to the latest firmware version as soon as it's available. Regularly check for updates and ensure that your router settings are properly configured to prevent unauthorized access. ๐Ÿ”’ You've got this! A little vigilance and you'll keep your network safe and sound! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 ยท 57.4th percentile
Published
2023-08-30T00:00Z
EPSS history
Timeline
  • 30 AUG 00:00Z
    Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet
    cvelistv5