CVE-2023-51954

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda AX1803 could turn your network into a hacker’s playground! 🔥 Think of it like overstuffing a suitcase — if you cram in too much, the zipper bursts and everything spills out. In this case, the iptv.stb.port parameter is the culprit causing the overflow, letting attackers waltz right in. An attacker could exploit this vulnerability to execute arbitrary code on your device, potentially taking full control of your network. Imagine the horror of a rogue user accessing your connected devices or intercepting sensitive information! The stakes are alarmingly high here.

Put simply

Think of it like overstuffing a suitcase — if you cram in too much, the zipper bursts and everything spills out. In this case, the iptv.stb.port parameter is the culprit causing the overflow, letting attackers waltz right in. This stack overflow occurs in the function formSetIptv, where improper handling of the iptv.stb.port parameter allows for excessive data input, leading to memory corruption and potential remote code execution.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on your device, potentially taking full control of your network. Imagine the horror of a rogue user accessing your connected devices or intercepting sensitive information! The stakes are alarmingly high here. To protect yourself, make sure to patch your Tenda AX1803 to the latest version immediately. Additionally, consider disabling any unnecessary services and regularly audit your network settings to minimize risks. You've got this! With the right steps, you’ll have your network secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv
    cvelistv5