CVE-2023-51962

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🚨 A simple parameter could unleash a stack overflow in the Tenda AX1803, turning your home network into a playground for cyber chaos! 🔥 Think of it like a restaurant that keeps serving food without checking the orders — if too many unexpected dishes come in, the kitchen can get overwhelmed and shut down completely. That's what's happening here, with the iptv.stb.mode parameter causing the device to crash. An attacker could exploit this vulnerability to crash the device, resulting in loss of access to your network and potentially exposing your data. With a CVSS score of 9.8, the consequences could be absolutely devastating, leaving your network vulnerable to further attacks.

Put simply

Think of it like a restaurant that keeps serving food without checking the orders — if too many unexpected dishes come in, the kitchen can get overwhelmed and shut down completely. That's what's happening here, with the iptv.stb.mode parameter causing the device to crash. This stack overflow vulnerability arises in the Tenda AX1803 due to improper handling of the iptv.stb.mode parameter in the setIptvInfo function, allowing for an overflow that can disrupt normal operations.

What to do

An attacker could exploit this vulnerability to crash the device, resulting in loss of access to your network and potentially exposing your data. With a CVSS score of 9.8, the consequences could be absolutely devastating, leaving your network vulnerable to further attacks. Immediate action is needed! Update to the latest firmware version to patch this vulnerability. Additionally, review your network settings and restrict access to only trusted users to guard against potential exploitation. You've got this! Follow these steps and secure your network from this scary stack overflow! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00729 · 53.7th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo
    cvelistv5