CVE-2023-45483

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time

published November 29, 2023

CVSS
—
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow could crash your router! In the Tenda AC10, the time parameter in the compare_parentcontrol_time function is throwing a tantrum, and it could affect your network's stability! Think of your router as a busy restaurant with a limited number of tables. If too many customers (data) try to sit down at once without proper reservations (checks), the whole place can get jammed up and stop functioning properly! An attacker could exploit this vulnerability by sending specially crafted requests, causing the router to become unresponsive. This could lead to network downtime, impacting your internet access and any connected devices, which could be absolutely devastating if you're in the middle of something important!

Put simply

Think of your router as a busy restaurant with a limited number of tables. If too many customers (data) try to sit down at once without proper reservations (checks), the whole place can get jammed up and stop functioning properly! This vulnerability allows for a stack overflow in the Tenda AC10 router, triggered by the time parameter in a specific function. When exploited, it can lead to crashes and instability in the device's performance.

What to do

An attacker could exploit this vulnerability by sending specially crafted requests, causing the router to become unresponsive. This could lead to network downtime, impacting your internet access and any connected devices, which could be absolutely devastating if you're in the middle of something important! To protect your network, ensure that your Tenda AC10 router is updated to the latest firmware version. Regularly check for updates, and consider implementing network monitoring to catch any unusual activity. This will help keep your router running smoothly! You've got this! By taking these steps, you're a step closer to securing your network. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Published
2023-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time
    cvelistv5