CVE-2024-52275CWE-121

Denial of Service on Tenda AC6V2 Due To Stack Overflow

High · published December 4, 2024

CVSS v4.0
8.3
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

⚡ A stack-based buffer overflow vulnerability in the Tenda AC6V2 could let attackers overflow your buffers and cause some serious havoc! 🔥 Think of it like a crowded restaurant where a waiter keeps piling plates on one table, eventually spilling them over onto the floor. This overflow can disrupt your entire dining experience, just as this vulnerability could disrupt your network's integrity. An attacker could potentially execute arbitrary code, leading to unauthorized access to your device. This could result in a compromised network, allowing attackers to intercept your data or manipulate your device settings. Yikes!

Put simply

Think of it like a crowded restaurant where a waiter keeps piling plates on one table, eventually spilling them over onto the floor. This overflow can disrupt your entire dining experience, just as this vulnerability could disrupt your network's integrity. The buffer overflow occurs in the fromWizardHandle modules of the Tenda AC6V2 router, allowing attackers to overflow memory limits and potentially execute malicious code.

What to do

An attacker could potentially execute arbitrary code, leading to unauthorized access to your device. This could result in a compromised network, allowing attackers to intercept your data or manipulate your device settings. Yikes! To mitigate this vulnerability, patch your Tenda AC6V2 to the latest firmware version as soon as possible. Ensure your device is updated to at least version 15.03.06.50, and regularly check for any future updates. 🟢 You can take action and protect your network! Stay vigilant and keep your devices updated to maintain security. 🛡️

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00591 · 47.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-12-04T10:20Z
EPSS history
Timeline
  • 04 DEC 10:20Z
    Denial of Service on Tenda AC6V2 Due To Stack Overflow
    cvelistv5