CVE-2023-51956

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda AX1803 could bring your network to its knees! Just a pesky parameter and boom—unexpected chaos. 🔥 Think of it like trying to stuff a massive suitcase into a tiny overhead bin. It just can't handle it! The iptv.city.vlan parameter is that suitcase, overflowing and causing a major meltdown in the system. If exploited, this vulnerability can lead to a complete system crash, allowing attackers to execute arbitrary code. Imagine having your internet connection hijacked and your private data exposed—all because of one vulnerable parameter. That's absolutely devastating!

Put simply

Think of it like trying to stuff a massive suitcase into a tiny overhead bin. It just can't handle it! The iptv.city.vlan parameter is that suitcase, overflowing and causing a major meltdown in the system. This stack overflow occurs in the function formSetIptv when handling the iptv.city.vlan parameter, leading to potential code execution if the input is larger than expected.

What to do

If exploited, this vulnerability can lead to a complete system crash, allowing attackers to execute arbitrary code. Imagine having your internet connection hijacked and your private data exposed—all because of one vulnerable parameter. That's absolutely devastating! Patch your Tenda AX1803 immediately to version 1.0.0.2, which addresses this critical vulnerability. Regularly review your input validation processes to prevent similar issues in the future—stay vigilant! You've got this! Fixing this vulnerability will help keep your network secure and your data safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv
    cvelistv5