CVE-2023-51963

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda AX1803 could turn your device into a playground for attackers! 🔥 Think of it like a crowded elevator where too many people push the buttons at once, causing it to crash. In this case, the iptv.city.vlan parameter overflows, leading to unpredictable behavior in the device. An attacker could exploit this vulnerability to execute malicious code remotely, potentially taking full control of your device. The fallout could be catastrophic—imagine someone hijacking your home network to snoop on your activity or launch further attacks. This is absolutely devastating and absolutely critical to fix!

Put simply

Think of it like a crowded elevator where too many people push the buttons at once, causing it to crash. In this case, the iptv.city.vlan parameter overflows, leading to unpredictable behavior in the device. The vulnerability arises from a stack overflow in the setIptvInfo function triggered by the iptv.city.vlan parameter. When the input exceeds the expected size, it can overwrite adjacent memory, leading to arbitrary code execution.

What to do

An attacker could exploit this vulnerability to execute malicious code remotely, potentially taking full control of your device. The fallout could be catastrophic—imagine someone hijacking your home network to snoop on your activity or launch further attacks. This is absolutely devastating and absolutely critical to fix! Immediately patch your Tenda AX1803 to version 1.0.0.2 or later. Ensure you check your device settings to disable any services that might be vulnerable until the patch is applied. Regularly monitor for updates and security advisories. You've got this! By acting now, you'll secure your network and keep those sneaky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00867 · 58.3th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo
    cvelistv5