CVE-2023-44023

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set…

published September 27, 2023

CVSS
—
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

⚠️ A simple SSID configuration could pave the way for a stack overflow! The Tenda AC10U router’s `form_fast_setting_wifi_set` function has a sneaky flaw waiting to be discovered. 👀 Think of it like a restaurant trying to handle an overflowing order slip — when too many items are written down, it can cause the whole kitchen to short-circuit! Here, the `ssid` parameter can trigger a crash if too much data is sent, leading to potential instability. An attacker could exploit this vulnerability to crash the router, disrupting your internet connectivity — that means no more streaming cat videos or video calls! While the severity is currently labeled unknown, it's a good reminder that even small issues can snowball into bigger headaches.

Put simply

Think of it like a restaurant trying to handle an overflowing order slip — when too many items are written down, it can cause the whole kitchen to short-circuit! Here, the `ssid` parameter can trigger a crash if too much data is sent, leading to potential instability. This vulnerability arises from a stack overflow triggered by excessive input in the `ssid` parameter of the `form_fast_setting_wifi_set` function, which can lead to unexpected behavior in the router's operation.

What to do

An attacker could exploit this vulnerability to crash the router, disrupting your internet connectivity — that means no more streaming cat videos or video calls! While the severity is currently labeled unknown, it's a good reminder that even small issues can snowball into bigger headaches. To protect yourself, check for firmware updates from Tenda. Although no patch is currently listed, monitoring for updates and avoiding excessive input in the settings can help mitigate risks. You've got this! Stay vigilant, keep your firmware updated, and you'll keep your internet safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01135 · 66.2th percentile
Published
2023-09-27T00:00Z
EPSS history
Timeline
  • 27 SEP 00:00Z
    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set…
    cvelistv5