CVE-2023-41560

Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg

published August 30, 2023

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow can be triggered just by tweaking the firewall settings on Tenda AC9 V3.0 — like overloading a fuse by cranking up the heat!🔥 Think of it like trying to stuff too many bags into an overhead compartment on an airplane; eventually, something's going to give and create a mess! In this case, the parameter 'firewallEn' is the culprit that can lead to a breakdown in your router's operation. If exploited, an attacker could cause the router to crash or behave unexpectedly, potentially opening the door to unauthorized access. This is not a direct breach but could lead to a loss of control over the device, which is still a headache worth avoiding!

Put simply

Think of it like trying to stuff too many bags into an overhead compartment on an airplane; eventually, something's going to give and create a mess! In this case, the parameter 'firewallEn' is the culprit that can lead to a breakdown in your router's operation. This vulnerability arises from a stack overflow issue when the 'firewallEn' parameter is improperly handled during the configuration at the '/goform/SetFirewallCfg' endpoint. It allows for excessive data to be sent, which can disrupt the normal operations of the router.

What to do

If exploited, an attacker could cause the router to crash or behave unexpectedly, potentially opening the door to unauthorized access. This is not a direct breach but could lead to a loss of control over the device, which is still a headache worth avoiding! To safeguard your network, it's crucial to patch your Tenda AC9 firmware to the latest version as updates are rolled out. Always keep an eye on your router settings and limit the input data to prevent unexpected behavior. And, if you're feeling adventurous, consider changing the default settings to enhance security further! You've got this! By taking these steps, you'll keep your network secure and your devices running smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00853 · 57.8th percentile
Published
2023-08-30T00:00Z
EPSS history
Timeline
  • 30 AUG 00:00Z
    Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter firewallEn at url /goform/SetFirewallCfg
    cvelistv5