CVE-2023-51959

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

🚨 A stack overflow in Tenda AX1803 could give attackers the keys to the kingdom! All they need is an exploit via the adv.iptv.stbpvid parameter. 🔥 Think of this vulnerability as a restaurant kitchen where one small overfilled pot could cause a massive overflow, ruining everything in its path. If the chef doesn’t keep an eye on things, the entire operation could be compromised! An attacker could leverage this overflow to execute malicious code, potentially gaining full control over the device. This could lead to unauthorized access to sensitive network data, turning your home network into a playground for cybercriminals!

Put simply

Think of this vulnerability as a restaurant kitchen where one small overfilled pot could cause a massive overflow, ruining everything in its path. If the chef doesn’t keep an eye on things, the entire operation could be compromised! The vulnerability exists due to improper handling of input in the formGetIptv function, allowing the adv.iptv.stbpvid parameter to overflow the stack, leading to arbitrary code execution.

What to do

An attacker could leverage this overflow to execute malicious code, potentially gaining full control over the device. This could lead to unauthorized access to sensitive network data, turning your home network into a playground for cybercriminals! To mitigate this threat, immediately update your Tenda AX1803 firmware to the latest version. Additionally, ensure that any unnecessary services are disabled and consider implementing network segmentation for added security. Stay vigilant! You've got this! Follow these steps to secure your device and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.6th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv
    cvelistv5