CVE-2023-51961

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv

Critical ยท published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

๐Ÿšจ A stack overflow in Tenda AX1803 could let attackers crash your device with a single parameter! ๐Ÿ”ฅ Think of it like a waiter mistakenly stacking too many plates on a single tray โ€” eventually, it all comes crashing down. A single malformed input can trigger a massive overflow, overwhelming the server's ability to handle requests. This means an attacker could potentially cause the device to become unresponsive, interrupting your internet service and leaving you with a hefty downtime. In a worst-case scenario, it might even open the door for further exploitation. Absolutely devastating for anyone relying on a stable connection!

Put simply

Think of it like a waiter mistakenly stacking too many plates on a single tray โ€” eventually, it all comes crashing down. A single malformed input can trigger a massive overflow, overwhelming the server's ability to handle requests. This vulnerability stems from a stack overflow caused by the adv.iptv.stballvlans parameter in the formGetIptv function, leading to potential crashes and instability in the device.

What to do

This means an attacker could potentially cause the device to become unresponsive, interrupting your internet service and leaving you with a hefty downtime. In a worst-case scenario, it might even open the door for further exploitation. Absolutely devastating for anyone relying on a stable connection! To mitigate this risk, update your Tenda AX1803 to version 1.0.0.2 or later immediately. Regularly audit your device settings and be cautious with any untrusted inputs. ๐Ÿš€ You've got this! Follow these steps and keep your network safe! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 ยท 52.6th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv
    cvelistv5