CVE Catalog

CVE-2023-50988

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda i29 v1.0 V1.0.0.5 device within the wifiRadioSetIndoor function via the bandwidth parameter. An attacker could exploit this flaw to execute arbitrary code or cause a denial of service.

Risk Assessment

The risk includes potential remote code execution, leading to full device compromise, network integrity breach, and data leakage.

Recommendation

Immediately update the firmware to the latest version and restrict management interface access to trusted networks only.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS