CVE-2023-51965

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow lurks in the Tenda AX1803, and it's hiding in plain sight! Just a crafty bit of input could bring your network to its knees. 🔥 Think of it as a restaurant kitchen where a recipe calls for just a pinch of salt, but someone adds a whole bag. The kitchen gets chaotic, orders get messed up, and the whole dinner service grinds to a halt! If an attacker exploits this vulnerability, they could cause a complete system crash, leaving your network vulnerable and unusable. This could lead to loss of service and could open the door to further attacks, making it a critical situation that demands immediate attention!

Put simply

Think of it as a restaurant kitchen where a recipe calls for just a pinch of salt, but someone adds a whole bag. The kitchen gets chaotic, orders get messed up, and the whole dinner service grinds to a halt! This stack overflow occurs via the adv.iptv.stbpvid parameter in the setIptvInfo function, allowing an attacker to overwhelm the system's stack with excessive data, potentially leading to arbitrary code execution.

What to do

If an attacker exploits this vulnerability, they could cause a complete system crash, leaving your network vulnerable and unusable. This could lead to loss of service and could open the door to further attacks, making it a critical situation that demands immediate attention! Immediately update your Tenda AX1803 firmware to the latest version that fixes this issue. Review your network configurations and monitor for any unusual activities that might indicate exploitation attempts. Don't wait—secure your network now! You've got this! Follow these steps, and you'll have your defenses up in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.6th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo
    cvelistv5