CVE-2024-52273CWE-121

Denial of Service on Tenda AC6V2 Due To Stack Overflow

High · published December 4, 2024

CVSS v4.0
8.3
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

⚡ A buffer overflow vulnerability in the Tenda AC6V2 router could make your network as vulnerable as a house without locks! 🚪💥 Imagine your router as a post office that overfills its mailbags, allowing unauthorized letters to slip in and cause chaos. This buffer overflow lets potential attackers overflow data, disrupting normal operations and gaining access to sensitive information. With this vulnerability, an attacker could exploit the overflow to execute malicious code, potentially gaining control over your router and compromising your entire network. This could lead to unauthorized data access, manipulation of settings, or even a complete network shutdown, which would be absolutely devastating!

Put simply

Imagine your router as a post office that overfills its mailbags, allowing unauthorized letters to slip in and cause chaos. This buffer overflow lets potential attackers overflow data, disrupting normal operations and gaining access to sensitive information. This stack-based buffer overflow occurs in the `guest_ip_check` function of the Tenda AC6V2 router's firmware, specifically with the `setDoublePppoeConfig` module. By sending specially crafted input, attackers can cause buffer overruns that may lead to arbitrary code execution.

What to do

With this vulnerability, an attacker could exploit the overflow to execute malicious code, potentially gaining control over your router and compromising your entire network. This could lead to unauthorized data access, manipulation of settings, or even a complete network shutdown, which would be absolutely devastating! To secure your network, update your Tenda AC6V2 router firmware to the latest version available beyond 15.03.06.50. Additionally, consider implementing network segmentation and disabling unused features to minimize the attack surface. Don't forget to regularly review your device settings and security practices! You've got this! Follow these steps, and your network will be safer in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-12-04T10:19Z
EPSS history
Timeline
  • 04 DEC 10:19Z
    Denial of Service on Tenda AC6V2 Due To Stack Overflow
    cvelistv5