CVE-2023-49432

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg

published December 7, 2023

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in Tenda AX9's 'deviceList' parameter! This vulnerability could cause some serious hiccups if left unchecked. 🔥 Think of it like a line of guests at a restaurant — if one guest tries to take up too much space in line, it can cause a bottleneck that affects everyone behind them. That's exactly how this stack overflow works: it can disrupt the normal flow of operations within the device. If exploited, this vulnerability could lead to unexpected behavior or crashes, potentially giving an attacker a way to manipulate the device’s functions. While no known exploits are in the wild, the risk of disruption is still present. It's like waiting for a storm that hasn't hit yet but could cause chaos when it does!

Put simply

Think of it like a line of guests at a restaurant — if one guest tries to take up too much space in line, it can cause a bottleneck that affects everyone behind them. That's exactly how this stack overflow works: it can disrupt the normal flow of operations within the device. This stack overflow vulnerability occurs in the 'deviceList' parameter at /goform/setMacFilterCfg, where overly large input can overwhelm the stack, leading to unpredictable outcomes or crashing.

What to do

If exploited, this vulnerability could lead to unexpected behavior or crashes, potentially giving an attacker a way to manipulate the device’s functions. While no known exploits are in the wild, the risk of disruption is still present. It's like waiting for a storm that hasn't hit yet but could cause chaos when it does! To protect your network, update your Tenda AX9 router to the latest firmware version available. Regularly check for updates to ensure all security patches are applied. Also, consider monitoring device configurations for unusual activity. You've got this! Keeping your router updated and monitoring its behavior will keep your network secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00925 · 60.1th percentile
Published
2023-12-07T00:00Z
EPSS history
Timeline
  • 07 DEC 00:00Z
    Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg
    cvelistv5