CVE-2024-57580

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function

Critical Ā· published January 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

🚨 A stack overflow in Tenda AC18 could bring your network to its knees! This menace lurks in the devName parameter of the formSetDeviceName function—one wrong move and chaos ensues! šŸ”„ Think of it like overstuffing a suitcase; if you pack too much without considering space, it bursts open, scattering everything within. This vulnerability does just that, overflowing critical resources and leaving your device wide open. An attacker could exploit this stack overflow to inject malicious code, essentially taking control of your router. This could lead to complete network compromise—imagine unauthorized access to all your connected devices and sensitive data. The consequences could be absolutely devastating!

Put simply

Think of it like overstuffing a suitcase; if you pack too much without considering space, it bursts open, scattering everything within. This vulnerability does just that, overflowing critical resources and leaving your device wide open. The vulnerability arises from improper handling of the devName parameter, allowing excessive data input, which leads to a stack overflow condition. This could enable remote code execution or denial of service, depending on the attacker's intentions.

What to do

An attacker could exploit this stack overflow to inject malicious code, essentially taking control of your router. This could lead to complete network compromise—imagine unauthorized access to all your connected devices and sensitive data. The consequences could be absolutely devastating! Update your Tenda AC18 firmware to version V15.03.05.20 immediately to eliminate this vulnerability. Additionally, consider implementing network segmentation and monitoring to minimize risk exposure in the future. Regular audits of device configurations can also help catch similar issues early! You've got this! Follow these steps, and you'll strengthen your security castle in no time! šŸ›”ļø

The record
Technical detail
CVSS v3.1
9.8 Ā· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00769 Ā· 55.1th percentile
Published
2025-01-16T00:00Z
EPSS history
Timeline
  • 16 JAN 00:00Z
    Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function
    cvelistv5