CVE-2024-44558

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo

High · published August 26, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow awaits in Tenda's AX1806, ready to crash your streaming party with just one rogue parameter! Think of it like a restaurant where a chef is overwhelmed by too many orders at once — the kitchen can't handle the pressure and everything goes haywire. In this case, the adv.iptv.stbpvid parameter acts like that barrage of orders, sending the system into a frenzy. If exploited, an attacker could cause the device to crash, disrupting your network and throwing a wrench into your streaming plans. This could lead to denial of service, making it absolutely devastating for those relying on smooth connectivity for their entertainment or work.

Put simply

Think of it like a restaurant where a chef is overwhelmed by too many orders at once — the kitchen can't handle the pressure and everything goes haywire. In this case, the adv.iptv.stbpvid parameter acts like that barrage of orders, sending the system into a frenzy. This vulnerability arises from a stack overflow in the setIptvInfo function, allowing too much data to overflow and potentially control the execution flow of the system.

What to do

If exploited, an attacker could cause the device to crash, disrupting your network and throwing a wrench into your streaming plans. This could lead to denial of service, making it absolutely devastating for those relying on smooth connectivity for their entertainment or work. To protect your device, update to the latest firmware version as soon as possible. Regularly check for updates and consider adjusting your network settings to limit exposure to untrusted inputs. You've got this! Patch up, stay vigilant, and keep your internet secure! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2024-08-26T00:00Z
EPSS history
Timeline
  • 26 AUG 00:00Z
    Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo
    cvelistv5