CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg

published December 7, 2023

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow in Tenda AX9's configuration could turn a simple route setting into a troublesome trip! Think of it like a restaurant misplacing a huge order — if they don’t have a way to handle an oversized request, the kitchen could overflow with too many dishes, causing chaos. This stack overflow vulnerability is just as problematic! An attacker could potentially exploit this flaw to crash the router or execute arbitrary code, leaving users with a malfunctioning device and a headache. It's not the end of the world, but no one enjoys being left in the lurch!

Put simply

Think of it like a restaurant misplacing a huge order — if they don’t have a way to handle an oversized request, the kitchen could overflow with too many dishes, causing chaos. This stack overflow vulnerability is just as problematic! The vulnerability exists in the 'list' parameter at /goform/SetStaticRouteCfg, leading to potential stack overflow when an overly large input is processed. This means a maliciously crafted request could overflow the stack, affecting router performance and security.

What to do

An attacker could potentially exploit this flaw to crash the router or execute arbitrary code, leaving users with a malfunctioning device and a headache. It's not the end of the world, but no one enjoys being left in the lurch! To mitigate this risk, ensure your router's firmware is updated to a secure version. Regularly check for updates from Tenda and consider implementing network monitoring to catch any suspicious activity early. You've got this! A quick firmware update and you’ll keep that router secure and running smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00925 · 60.1th percentile
Published
2023-12-07T00:00Z
EPSS history
Timeline
  • 07 DEC 00:00Z
    Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg
    cvelistv5