CVE Catalog

CVE-2023-50990

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda i29 device version V1.0.0.5 in the rebootTime parameter of the sysScheduleRebootSet function.

Risk Assessment

An attacker can remotely crash the device or gain unauthorized access, leading to network disruption and potential data loss.

Recommendation

Immediately update the Tenda i29 firmware to the latest version if a patch is available, or restrict access to the management interface to trusted networks only.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS