CVE-2024-44563

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo

High · published August 26, 2024

CVSS v3.1
8.0
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

⚡ It's a stack overflow waiting to happen! The Tenda AX1806 v1.0.0.1 has a sneaky flaw hiding in the iptv.stb.port parameter, just waiting for the right input to unleash chaos. 🔥 Think of this vulnerability like an overstuffed elevator; if you keep loading it with too many people (data), it could crash down, causing everyone inside to get hurt. An attacker could exploit this stack overflow to crash the device, potentially leading to a denial of service. If they are especially crafty, they might even gain the ability to execute arbitrary code, allowing them to take control of the system. That's a recipe for disaster!

Put simply

Think of this vulnerability like an overstuffed elevator; if you keep loading it with too many people (data), it could crash down, causing everyone inside to get hurt. This vulnerability in the Tenda AX1806 is triggered by excessive data passed to the setIptvInfo function via the iptv.stb.port parameter, overflowing the stack and leading to unpredictable behavior or system crashes.

What to do

An attacker could exploit this stack overflow to crash the device, potentially leading to a denial of service. If they are especially crafty, they might even gain the ability to execute arbitrary code, allowing them to take control of the system. That's a recipe for disaster! To safeguard your device, update the firmware to the latest version where this vulnerability is patched. Always ensure that your device settings are configured to limit unexpected inputs as an additional line of defense. Regularly check for updates to keep your systems secure. You've got this! By following these steps, you'll be one step closer to securing your device and boosting your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00612 · 48.6th percentile
Published
2024-08-26T00:00Z
EPSS history
Timeline
  • 26 AUG 00:00Z
    Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo
    cvelistv5