Tenda AX1803 1.0.0.1 setIptvInfo mode stack-based overflow

Summaryinfo

A vulnerability categorized as critical has been discovered in Tenda AX1803 1.0.0.1. The affected element is the function setIptvInfo. Executing a manipulation of the argument mode can lead to stack-based overflow. This vulnerability is registered as CVE-2023-51962. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. This vulnerability affects the function setIptvInfo. The manipulation of the argument mode with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

The weakness was published 01/10/2024. The advisory is shared for download at grove-laser-8ad.notion.site. This vulnerability was named CVE-2023-51962 since 12/26/2023. There are known technical details, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-56642). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Tenda

Name

• AX1803

Version

• 1.0.0.1

License

• commercial

Website

• Vendor: https://www.tenda.com.cn/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion