CVE Catalog

CVE-2023-50984

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda i29 device version V1.0.0.5 in the spdtstConfigAndStart function via the ip parameter. An attacker can exploit this flaw to execute arbitrary code or cause a denial of service.

Risk Assessment

The risk includes potential remote code execution, which could lead to network compromise, data leakage, or service disruption.

Recommendation

Immediately update the firmware to the latest version and restrict management interface access to trusted IP addresses only.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS