CVE-2023-51968

Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🔥 A stack overflow in Tenda AX1803 lets attackers crash the system with a crafty parameter! 😱 Think of it like an overstuffed suitcase: too much pressure and it bursts at the seams, spilling its contents everywhere. In this case, the system is overwhelmed by excess data, leading to potential chaos. An attacker could exploit this vulnerability to crash the device, potentially taking down services that rely on the Tenda AX1803. In an environment where connectivity is key, this could spell disaster! Imagine losing your internet access just when you need it most – absolutely devastating!

Put simply

Think of it like an overstuffed suitcase: too much pressure and it bursts at the seams, spilling its contents everywhere. In this case, the system is overwhelmed by excess data, leading to potential chaos. The vulnerability exists in the adv.iptv.stballvlans parameter of the getIptvInfo function, where excessive input can lead to a stack overflow, allowing attackers to disrupt normal operations.

What to do

An attacker could exploit this vulnerability to crash the device, potentially taking down services that rely on the Tenda AX1803. In an environment where connectivity is key, this could spell disaster! Imagine losing your internet access just when you need it most – absolutely devastating! Immediate action is required! Update to the latest firmware version 1.0.0.2 to patch this stack overflow issue, and make sure to monitor your device for any unusual activity. Don't let this vulnerability linger! You've got this! With a few quick updates, you'll have your system secure again in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00729 · 53.7th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo
    cvelistv5