CVE-2023-45479

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098

published November 29, 2023

CVSS
โ€”
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

โš ๏ธ An unexpected stack overflow hides in Tenda AC10, just waiting for the wrong input to trigger it! ๐Ÿ”ฅ Think of this vulnerability like a restaurant's kitchen where a recipe calls for a specific amount of ingredients, but the chef accidentally dumps in an entire barrel of salt โ€” it overwhelms the system, causing everything to go haywire! If exploited, this could lead to unpredictable behavior in the Tenda AC10 router, potentially crashing the device or allowing unauthorized access. While there's no known exploitation out there, the lurking nature of this flaw could result in a seriously inconvenient situation for users.

Put simply

Think of this vulnerability like a restaurant's kitchen where a recipe calls for a specific amount of ingredients, but the chef accidentally dumps in an entire barrel of salt โ€” it overwhelms the system, causing everything to go haywire! This vulnerability stems from a stack overflow triggered by the 'list' parameter in the function sub_49E098, allowing excessive data input that exceeds the stack's limit.

What to do

If exploited, this could lead to unpredictable behavior in the Tenda AC10 router, potentially crashing the device or allowing unauthorized access. While there's no known exploitation out there, the lurking nature of this flaw could result in a seriously inconvenient situation for users. To protect against this, ensure your Tenda AC10 router is updated to the latest firmware version. Regularly check for updates and consider implementing strict input validation to mitigate potential risks. You've got this! Stay proactive, and with these steps, you'll keep your network secure! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 ยท 61.7th percentile
Published
2023-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098
    cvelistv5