CVE-2023-45482

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info

published November 29, 2023

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in Tenda AC10, and it’s made possible through the unsuspecting 'urls' parameter! 🔍 Think of it like a restaurant that keeps accepting more and more reservations without checking their capacity — eventually, it just collapses under pressure! 🍽️ If exploited, this vulnerability could lead to an application crash or unexpected behavior, as the stack overflows and disrupts the normal functioning of the system. While no known exploits exist yet, the potential for chaos could be just around the corner!

Put simply

Think of it like a restaurant that keeps accepting more and more reservations without checking their capacity — eventually, it just collapses under pressure! 🍽️ This vulnerability is caused by a stack overflow in the get_parentControl_list_Info function, triggered by manipulation of the 'urls' parameter, allowing excessive data to overflow the stack memory.

What to do

If exploited, this vulnerability could lead to an application crash or unexpected behavior, as the stack overflows and disrupts the normal functioning of the system. While no known exploits exist yet, the potential for chaos could be just around the corner! To protect yourself, ensure your Tenda AC10 is updated to the latest firmware version available. Regularly check for updates, and consider monitoring your network for unusual behavior. Don’t leave any doors open! 🔒 You've got this! Stay proactive, keep your devices updated, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.7th percentile
Published
2023-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info
    cvelistv5