CVE-2024-44551

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv

Critical · published August 26, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in Tenda AX1806 could let attackers crash your system with a single parameter! 🔥 Think of it like a pizza delivery gone wrong: if the delivery driver keeps cramming boxes into a car that’s already packed, it’ll eventually burst — and in this case, your router is that car! An attacker could trigger the stack overflow and potentially take control of your device, leading to a complete system crash or even worse, taking over your network! This kind of vulnerability is absolutely devastating, leaving your personal data and smart devices wide open to malicious activities.

Put simply

Think of it like a pizza delivery gone wrong: if the delivery driver keeps cramming boxes into a car that’s already packed, it’ll eventually burst — and in this case, your router is that car! The vulnerability arises in the Tenda AX1806 router through the iptv.city.vlan parameter in the formGetIptv function, where unchecked user input can lead to excessive data being processed, causing the stack to overflow.

What to do

An attacker could trigger the stack overflow and potentially take control of your device, leading to a complete system crash or even worse, taking over your network! This kind of vulnerability is absolutely devastating, leaving your personal data and smart devices wide open to malicious activities. Immediately patch your Tenda AX1806 to version 1.0.0.2 or higher to mitigate this issue. Also, review and limit the input parameters that can be accepted by the router to enhance security. Regularly check for updates to stay protected! You've got this! Follow the steps above, and you'll fortify your router like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2024-08-26T00:00Z
EPSS history
Timeline
  • 26 AUG 00:00Z
    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv
    cvelistv5