CVE-2023-45480

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878

published November 29, 2023

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in Tenda AC10 could let attackers tip the balance just by tweaking the `src` parameter! Think of it like a jenga tower, where removing the wrong block leads to a collapse—just a small change can create chaos. In this case, the stack overflow can allow malicious code to run, putting your device at risk. An attacker could exploit this vulnerability to crash the device or potentially execute arbitrary commands, leaving your network wide open for mischief. This means they could take control of your router, which would be an absolute nightmare for your home security!

Put simply

Think of it like a jenga tower, where removing the wrong block leads to a collapse—just a small change can create chaos. In this case, the stack overflow can allow malicious code to run, putting your device at risk. This vulnerability arises from a stack overflow in the Tenda AC10's processing of the `src` parameter in the function sub_47D878, which doesn't properly handle input size, allowing for overflow conditions.

What to do

An attacker could exploit this vulnerability to crash the device or potentially execute arbitrary commands, leaving your network wide open for mischief. This means they could take control of your router, which would be an absolute nightmare for your home security! To secure your device, update the firmware to the latest version as soon as it's available. Regularly check for updates and consider changing default settings to limit access until a patch is released. You've got this, security hero! Just follow those steps and give your router the protection it deserves! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.7th percentile
Published
2023-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878
    cvelistv5