CVE-2023-50990

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function

published December 20, 2023

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

⚠️ A buffer overflow lurks in the rebootTime parameter of Tenda i29 routers like a surprise guest at a party – totally unexpected and potentially disruptive! Think of it like a restaurant that keeps adding more and more orders to the kitchen without checking if there's enough room on the counter. Eventually, the system gets overwhelmed, and everything spills over! If exploited, an attacker could potentially crash the device or manipulate the system's behavior, leading to downtime or even unauthorized access. It's like having an unexpected power outage that leaves your network in the dark.

Put simply

Think of it like a restaurant that keeps adding more and more orders to the kitchen without checking if there's enough room on the counter. Eventually, the system gets overwhelmed, and everything spills over! This vulnerability in the sysScheduleRebootSet function allows an attacker to exploit a buffer overflow through the rebootTime parameter, potentially giving them control over the device.

What to do

If exploited, an attacker could potentially crash the device or manipulate the system's behavior, leading to downtime or even unauthorized access. It's like having an unexpected power outage that leaves your network in the dark. To mitigate this risk, ensure you're running the latest firmware version (V1.0.0.5) for your Tenda i29 router. Additionally, consider implementing network segmentation to limit exposure while you patch your devices. You've got this! By staying proactive, you can keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00769 · 55.1th percentile
Published
2023-12-20T00:00Z
EPSS history
Timeline
  • 20 DEC 00:00Z
    Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function
    cvelistv5