CVE-2024-44550

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv

High · published August 26, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow in Tenda AX1806 could spell trouble through a single parameter! The adv.iptv.stbpvid field is your ticket to potential chaos! 🔥 Think of this as a hotel with an overflowing fountain in the lobby. One little glitch, and that water can spill over, flooding the entire area, causing a mess that’s hard to control! An attacker leveraging this stack overflow could execute arbitrary code, potentially gaining full control of the device. This means everything from hijacking sensitive data to turning your router into a rogue access point is on the table. Quite the digital disaster!

Put simply

Think of this as a hotel with an overflowing fountain in the lobby. One little glitch, and that water can spill over, flooding the entire area, causing a mess that’s hard to control! This vulnerability involves a stack overflow in the function formGetIptv. By sending specially crafted input to the adv.iptv.stbpvid parameter, an attacker can exploit the overflow to execute malicious code.

What to do

An attacker leveraging this stack overflow could execute arbitrary code, potentially gaining full control of the device. This means everything from hijacking sensitive data to turning your router into a rogue access point is on the table. Quite the digital disaster! Immediately update your Tenda AX1806 to version 1.0.0.2 or later to close this vulnerability. Regularly review your network configurations and consider enabling additional safeguards like firewalls to bolster your defenses. You've got this! Follow these steps, and you'll have your network secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2024-08-26T00:00Z
EPSS history
Timeline
  • 26 AUG 00:00Z
    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv
    cvelistv5