CVE-2023-51970

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv

Critical · published January 10, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda AX1803 can turn your network into a playground for attackers! 🔥 Think of it as a waiter who takes too many orders at once, causing the kitchen to crash under the pressure — too much data sent through the `iptv.stb.mode` parameter can overwhelm the system and cause it to fail spectacularly. An attacker could exploit this overflow to execute arbitrary code, which could lead to complete control over your device — a hacker essentially taking the keys to your network castle! This could open the door to data theft, unauthorized changes, or even a full system crash, leaving you wide open to further attacks.

Put simply

Think of it as a waiter who takes too many orders at once, causing the kitchen to crash under the pressure — too much data sent through the `iptv.stb.mode` parameter can overwhelm the system and cause it to fail spectacularly. This vulnerability occurs in the Tenda AX1803 due to improper handling of the `iptv.stb.mode` parameter in the `formSetIptv` function, allowing for a stack overflow that can be manipulated by an attacker to execute malicious code.

What to do

An attacker could exploit this overflow to execute arbitrary code, which could lead to complete control over your device — a hacker essentially taking the keys to your network castle! This could open the door to data theft, unauthorized changes, or even a full system crash, leaving you wide open to further attacks. Patch your Tenda AX1803 immediately to version 1.0.0.2, which addresses this vulnerability. Additionally, review your network configurations to ensure no unauthorized access is possible. Regularly check for updates to maintain security and stability. You've got this! Follow these steps to safeguard your network and reclaim your peace of mind. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00729 · 53.7th percentile
Published
2024-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv
    cvelistv5