Buffer Overflow Vulnerability in Tenda i29 Router
CVE-2023-50991
7.5HIGH
What is CVE-2023-50991?
The Tenda i29 router has a buffer overflow vulnerability that can be exploited by remote attackers. Specifically, this flaw exists in the pingSet function, where improper handling of the pingIp parameter can lead to a denial of service (DoS). By sending specially crafted requests, an attacker can disrupt normal operation of the device, impacting availability and reliability for users.
References
EPSS Score
16% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved