CVE-2023-44015

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi…

High · published September 27, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

⚡ A single oversize input to the schedEndTime parameter can crash the whole Tenda AC10U router! Just like a restaurant overwhelmed by a party of too many guests, this stack overflow could leave your device gasping for air! Think of your router as a busy restaurant kitchen. If it tries to juggle more orders than it can handle, it can crash, leaving diners (or in this case, devices) waiting in hungry frustration. That's exactly what a stack overflow does here — it overwhelms the router's ability to process requests! If exploited, an attacker could effectively cause a denial of service, shutting down your Wi-Fi and leaving all your connected devices offline. Imagine being cut off from the internet when you need it most! That's a serious inconvenience and could lead to chaos in your digital life.

Put simply

Think of your router as a busy restaurant kitchen. If it tries to juggle more orders than it can handle, it can crash, leaving diners (or in this case, devices) waiting in hungry frustration. That's exactly what a stack overflow does here — it overwhelms the router's ability to process requests! This vulnerability arises from a stack overflow in the setSchedWifi function when the schedEndTime parameter receives an excessively large input, causing the router to crash unexpectedly.

What to do

If exploited, an attacker could effectively cause a denial of service, shutting down your Wi-Fi and leaving all your connected devices offline. Imagine being cut off from the internet when you need it most! That's a serious inconvenience and could lead to chaos in your digital life. To protect your network, update to the latest firmware version provided by Tenda as soon as possible. Additionally, monitor any device logs for unusual activity and consider limiting access to your router's settings to trusted devices only. You've got this! Update your router and keep your network rock solid! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00786 · 55.7th percentile
Published
2023-09-27T00:00Z
EPSS history
Timeline
  • 27 SEP 00:00Z
    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi…
    cvelistv5