CVE-2024-28553

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function

Critical Β· published March 12, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

πŸ”₯ A stack overflow in Tenda AC18 could be your weakest link! With the entry's parameter in the fromAddressNat function, this vulnerability is just itching for trouble! Think of it like a restaurant that keeps serving more and more food without checking if the plates can handle the overflow. Eventually, the plates crack under pressure, and everything spills out! An attacker could exploit this stack overflow to execute arbitrary code, possibly taking complete control of your router. This is absolutely devastating β€” they could redirect your traffic, snoop on your data, or even launch further attacks from your network!

Put simply

Think of it like a restaurant that keeps serving more and more food without checking if the plates can handle the overflow. Eventually, the plates crack under pressure, and everything spills out! This vulnerability allows for a stack overflow condition due to improperly handled input in the entry's parameter of the fromAddressNat function. An attacker could send specially crafted data to the device, leading to potential code execution.

What to do

An attacker could exploit this stack overflow to execute arbitrary code, possibly taking complete control of your router. This is absolutely devastating β€” they could redirect your traffic, snoop on your data, or even launch further attacks from your network! Immediately patch your Tenda AC18 to version V15.03.05.06 or later to eliminate this critical vulnerability. Review your network configurations, and consider implementing intrusion detection to monitor for suspicious activity. Don't wait β€” act fast! You've got this! πŸ¦Έβ€β™‚οΈ Taking these steps will boost your network's security and keep those nasty attackers at bay!

The record
Technical detail
CVSS v3.1
9.8 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00775 Β· 55.3th percentile
Published
2024-03-12T00:00Z
EPSS history
Timeline
  • 12 MAR 00:00Z
    Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAddressNat function
    cvelistv5