CVE-2023-50992

CriticalCVSS 9.8

Published: 20/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A stack overflow vulnerability was discovered in the Tenda i29 device version V1.0.0.5 in the setPing function via the ip parameter. An attacker can exploit this flaw to execute arbitrary code or cause a denial of service.

Risk Assessment

The risk for the organization includes potential remote code execution, which could lead to network compromise and data exfiltration.

Recommendation

It is recommended to immediately update the Tenda i29 firmware to the latest available version that addresses this vulnerability. If no update is available, restrict device access to trusted networks only.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.