CVE-2023-51964

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow in Tenda AX1803's IPTV settings can turn your router into a hacker's playground—it's a ticking time bomb waiting for a crafty attacker! 🔥 Think of it like a restaurant kitchen where one chef is overcooking a dish. Instead of the dish being served, it spills over and disrupts everything, causing chaos in the entire establishment. This stack overflow can lead to unexpected behaviors, just like that messy kitchen! An attacker could exploit this vulnerability to crash the device or execute arbitrary code, gaining full control over the router. This means they could intercept network traffic, alter settings, or even compromise connected devices. The potential for chaos in your home network is absolutely devastating!

Put simply

Think of it like a restaurant kitchen where one chef is overcooking a dish. Instead of the dish being served, it spills over and disrupts everything, causing chaos in the entire establishment. This stack overflow can lead to unexpected behaviors, just like that messy kitchen! The vulnerability stems from improper handling of the iptv.stb.port parameter in the setIptvInfo function, leading to a stack overflow condition. This could allow an attacker to manipulate the router's memory and execute malicious code.

What to do

An attacker could exploit this vulnerability to crash the device or execute arbitrary code, gaining full control over the router. This means they could intercept network traffic, alter settings, or even compromise connected devices. The potential for chaos in your home network is absolutely devastating! To protect your devices, immediately patch the router firmware to version 1.0.0.2 or later. Additionally, review your network configurations and ensure access controls are in place. Regularly check for updates to stay ahead of potential threats! You've got this! Follow these steps, and you'll have your network secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo
    cvelistv5