CVE-2023-50988

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function

published December 20, 2023

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow hides in the Tenda i29's bandwidth settings! This little oversight could lead to some unexpected consequences. 🔍 Think of this like a waiter who keeps pouring soup into a bowl that’s already full — eventually, it spills over and creates a mess. In this case, the buffer overflow occurs when too much data is sent through the bandwidth parameter, exceeding the allocated space. If exploited, an attacker could potentially manipulate the device's operations, leading to erratic behavior or a complete crash. While there’s no immediate indication of exploitation, the risk could escalate if left unchecked and reconfigured maliciously.

Put simply

Think of this like a waiter who keeps pouring soup into a bowl that’s already full — eventually, it spills over and creates a mess. In this case, the buffer overflow occurs when too much data is sent through the bandwidth parameter, exceeding the allocated space. This vulnerability arises from a buffer overflow during the execution of the wifiRadioSetIndoor function, where excessive data input via the bandwidth parameter can lead to memory corruption.

What to do

If exploited, an attacker could potentially manipulate the device's operations, leading to erratic behavior or a complete crash. While there’s no immediate indication of exploitation, the risk could escalate if left unchecked and reconfigured maliciously. To mitigate this risk, users should update the Tenda i29 firmware to the latest version if available. Additionally, audit the configuration settings for any potential anomalies that could lead to excessive data inputs. It’s wise to implement monitoring for unusual activity as well! You’ve got this! Stay proactive and secure your devices. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00769 · 55.1th percentile
Published
2023-12-20T00:00Z
EPSS history
Timeline
  • 20 DEC 00:00Z
    Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function
    cvelistv5