CVE-2023-45484

Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic

published November 29, 2023

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow hides in the Tenda AC10 router, just waiting for the right input to spill over! 🔥 Think of this like a crowded elevator—if too many people push their way in without proper checks, everyone could end up squished and in a panic. This overflow issue allows excessive input via the shareSpeed parameter, potentially causing the system to crash or misbehave. If exploited, an attacker could trigger a stack overflow, leading to unexpected behavior or crashes in the router. While no known exploits are out there yet, the potential for disruption or unauthorized access is definitely present, making it a situation worth addressing!

Put simply

Think of this like a crowded elevator—if too many people push their way in without proper checks, everyone could end up squished and in a panic. This overflow issue allows excessive input via the shareSpeed parameter, potentially causing the system to crash or misbehave. This vulnerability in the Tenda AC10 arises from insufficient handling of the shareSpeed parameter in the fromSetWifiGuestBasic function, which can lead to memory overflow issues.

What to do

If exploited, an attacker could trigger a stack overflow, leading to unexpected behavior or crashes in the router. While no known exploits are out there yet, the potential for disruption or unauthorized access is definitely present, making it a situation worth addressing! To protect your network, update your Tenda AC10 router firmware to the latest version available. Regularly check for firmware updates and ensure you're using secure configurations to minimize risks. You've got this! Secure your device today, and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.7th percentile
Published
2023-11-29T00:00Z
EPSS history
Timeline
  • 29 NOV 00:00Z
    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic
    cvelistv5