Stack Overflow Vulnerability in Tenda AX1803 Router
CVE-2023-48111

7.5HIGH

Key Information:

Vendor
Tenda
Status
Ax1803 Firmware
Vendor
CVE Published:
20 November 2023

Summary

The Tenda AX1803 router version 1.0.0.1 is vulnerable to a stack overflow condition caused by improper handling of the 'time' parameter within the 'saveParentControlInfo' function. This flaw allows attackers to exploit the vulnerability, potentially leading to a Denial of Service (DoS) situation where legitimate users are unable to access the router's services. It is crucial for users of this router model to be aware of this risk and take appropriate measures to mitigate any potential attacks.

References

http://tjr181.com/index.php/archives/13/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.