CVE-2024-35580

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv

Critical · published May 20, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

🔥 A single crafty parameter can lead to a stack overflow in Tenda AX1806, putting your network at risk! Think of it like a restaurant where one too many orders for the same dish causes the kitchen to overflow with chaos — if not managed, it could bring the whole operation to a standstill! An attacker could exploit this vulnerability to crash your device, leading to a complete denial of service. This could disrupt your home or business network, leaving all your connected devices in the lurch. Imagine the frustration of having everything go dark just because of a sneaky parameter!

Put simply

Think of it like a restaurant where one too many orders for the same dish causes the kitchen to overflow with chaos — if not managed, it could bring the whole operation to a standstill! This stack overflow vulnerability stems from the adv.iptv.stbpvid parameter in the formSetIptv function, which can be manipulated to overflow the call stack, potentially allowing an attacker to execute arbitrary code or crash the device.

What to do

An attacker could exploit this vulnerability to crash your device, leading to a complete denial of service. This could disrupt your home or business network, leaving all your connected devices in the lurch. Imagine the frustration of having everything go dark just because of a sneaky parameter! Upgrade your Tenda AX1806 to version 1.0.0.2 immediately to mitigate this risk. Regularly review and sanitize input parameters to avoid similar vulnerabilities in the future. Don't forget to check your device settings to ensure they are configured securely! You've got this! By taking these steps, you'll fortify your defenses and keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00568 · 46.3th percentile
Published
2024-05-20T17:25Z
EPSS history
Timeline
  • 20 MAY 17:25Z
    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv
    cvelistv5