Stack Overflow Vulnerability in Tenda AC5 Router
CVE-2023-25214

9.8CRITICAL

Key Information:

Vendor

Tenda
Status
Ac5 Firmware
Vendor
CVE Published:
7 April 2023

What is CVE-2023-25214?

A vulnerability has been identified in the Tenda AC5 router, specifically in the setSchedWifi function. This vulnerability enables remote attackers to exploit a stack overflow, potentially leading to a Denial of Service (DoS) or allowing the execution of arbitrary code through a crafted payload. It poses significant risks to users' network security and stability, requiring immediate attention.

References

https://github.com/DrizzlingSun/Tenda/blob/main/AC5/4/4.md

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-25214 : Stack Overflow Vulnerability in Tenda AC5 Router