CVE-2024-30620

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan

Critical · published April 2, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

🚨 A stack overflow in Tenda AX1803 could open the floodgates for attackers! This vulnerability lives in the serviceName parameter, ready to wreak havoc. 🔥 Imagine a juggler who can’t catch a ball, causing all the other balls to come crashing down. That’s what this stack overflow could do, overwhelming your router's system and leading to a full-blown crash! This stack overflow could allow attackers to take control of the device, leading to a potential denial of service or even remote code execution. They could exploit this to gain unauthorized access, change settings, or disrupt your entire home network—a recipe for absolute chaos!

Put simply

Imagine a juggler who can’t catch a ball, causing all the other balls to come crashing down. That’s what this stack overflow could do, overwhelming your router's system and leading to a full-blown crash! The vulnerability arises from improper handling of the serviceName parameter in the fromAdvSetMacMtuWan function, allowing an attacker to cause a stack overflow and execute arbitrary code.

What to do

This stack overflow could allow attackers to take control of the device, leading to a potential denial of service or even remote code execution. They could exploit this to gain unauthorized access, change settings, or disrupt your entire home network—a recipe for absolute chaos! Immediate action is crucial! Patch your Tenda AX1803 to the latest version as soon as it becomes available, and ensure that your router is secured with strong passwords and updated firmware. Regularly audit your network settings to prevent unauthorized access. You’ve got this! With these steps, you’ll be back in control and safeguarding your network in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00817 · 56.7th percentile
Published
2024-04-02T00:00Z
EPSS history
Timeline
  • 02 APR 00:00Z
    Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan
    cvelistv5