CVE-2024-52272CWE-121

Denial of Service on Tenda AC6V2 Due To Stack Overflow

High ยท published December 4, 2024

CVSS v4.0
8.3
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

โšก A stack-based buffer overflow in the Tenda AC6V2 could turn your router into a playground for attackers! ๐Ÿ› ๏ธ๐ŸŽ‰ Think of it like a restaurant kitchen where the chef keeps adding more ingredients to a single pot without checking the size โ€“ eventually, it overflows, making a mess everywhere! In this case, the overflow could lead to a severe breach of your network. An attacker could exploit this vulnerability to execute arbitrary code on the device, potentially taking control of your network and accessing sensitive information. It's a serious risk that could lead to unauthorized access or disruption of your internet connection. ๐Ÿ”ฅ

Put simply

Think of it like a restaurant kitchen where the chef keeps adding more ingredients to a single pot without checking the size โ€“ eventually, it overflows, making a mess everywhere! In this case, the overflow could lead to a severe breach of your network. This vulnerability arises from improper handling of the 'lanMask' argument in the AdvSetLanip module, allowing excess data to overwrite adjacent memory locations.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the device, potentially taking control of your network and accessing sensitive information. It's a serious risk that could lead to unauthorized access or disruption of your internet connection. ๐Ÿ”ฅ To protect your device, upgrade your Tenda AC6V2 to the latest firmware version beyond 15.03.06.50. It's vital to regularly check for updates and apply any patches provided by the manufacturer. ๐Ÿ”’ You've got this! Patch that router and keep your network safe and sound! ๐Ÿ›ก๏ธ๐Ÿ˜‰

The record
Technical detail
CVSS v4.0
8.3 ยท HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00450 ยท 38.1th percentile
Weakness
CWE-121 ยท Stack-based Buffer Overflow
Published
2024-12-04T10:18Z
EPSS history
Timeline
  • 04 DEC 10:18Z
    Denial of Service on Tenda AC6V2 Due To Stack Overflow
    cvelistv5