CVE-2023-41555

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet

published August 30, 2023

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in the Tenda AC7 router's WiFi settings! Just a tweak in the parameters at /goform/WifiBasicSet could send everything crashing down! 🔥 Think of it like a crowded elevator where one extra person forces the doors to malfunction — the stack overflow can cause the system to buckle under pressure, leading to a major breakdown. If exploited, this vulnerability could lead to a system crash, leaving your router unable to function properly — imagine being locked out of your own internet! While there’s no active exploitation reported yet, it could pave the way for unintended disruptions.

Put simply

Think of it like a crowded elevator where one extra person forces the doors to malfunction — the stack overflow can cause the system to buckle under pressure, leading to a major breakdown. This stack overflow occurs via the 'security_5g' parameter when making requests to the specified URL, allowing an attacker to send oversized input that overwhelms the stack memory.

What to do

If exploited, this vulnerability could lead to a system crash, leaving your router unable to function properly — imagine being locked out of your own internet! While there’s no active exploitation reported yet, it could pave the way for unintended disruptions. To protect against this, patch your Tenda AC7 to the latest firmware version as soon as possible. Regularly check for updates and consider implementing network monitoring to quickly spot unusual behavior. You've got this! Keep your network safe and sound by staying up to date! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-08-30T00:00Z
EPSS history
Timeline
  • 30 AUG 00:00Z
    Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet
    cvelistv5