PT-2023-4719 · Tenda · Tenda Ac9+1

Published 2023-08-25 · Updated 2023-09-01 · CVE-2023-41563

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda AC9 versions V3.0 V15.03.06.42 multi Tenda AC5 versions US AC5V1.0RTL V15.03.06.28

Description The issue is related to a stack overflow in the GetParentControlInfo() function of Tenda AC9 and Tenda AC5 router software. This occurs when the mac parameter is processed, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service. The vulnerability is exploited via the API endpoint "/goform/GetParentControlInfo" with the vulnerable mac parameter.

Recommendations For Tenda AC9 version V3.0 V15.03.06.42 multi, consider disabling the GetParentControlInfo() function until a patch is available. For Tenda AC5 version US AC5V1.0RTL V15.03.06.28, restrict access to the "/goform/GetParentControlInfo" API endpoint to minimize the risk of exploitation. Avoid using the mac parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-05145

CVE-2023-41563

Affected Products

Tenda Ac5

Tenda Ac9

References · 7

• 🔥 https://github.com/peris-navince/founded-0-days/blob/main/GetParentControlInfo/1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-41563 · Security Note
• https://bdu.fstec.ru/vul/2023-05145 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41563 · Vendor Advisory
• https://t.me/cibsecurity/69428 · Telegram Post
• https://vuldb.com/ru/?id.238365 · Note
• https://twitter.com/CVEnew/status/1696868689922904400 · Twitter Post