CVE-2023-50986

CriticalCVSS 9.8

Published: 20/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda i29 device version V1.0.0.5, specifically in the sysLogin function via the time parameter. An attacker can send a crafted request to cause a system crash or potentially execute arbitrary code.

Risk Assessment

The risk includes potential remote code execution or denial of service, which could compromise network integrity and device control.

Recommendation

Immediately update the Tenda i29 firmware to the latest available version, or apply temporary network restrictions to limit access to the management interface.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function.