CVE-2023-50991

CWE-120 — Classic Buffer Overflow4 documents4 sources

Severity

7.5HIGH

EPSS

12.9%

top 5.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tenda I29 Firmware

Timeline

PublishedJan 5

Latest updateMay 8

Description

Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDtenda/i29_firmware1.0.0.2, 1.0.0.5+1

🔴Vulnerability Details

GHSA

GHSA-5f2c-q448-h62x: Buffer Overflow vulnerability in Tenda i29 versions 1↗2024-01-05

▶

CVEList

CVE-2023-50991: Buffer Overflow vulnerability in Tenda i29 versions 1↗2024-01-05

▶

🔍Detection Rules

Suricata

ET WEB_SPECIFIC_APPS Tenda pingSet pingIp parameter Buffer Overflow Attempt (CVE-2023-50991)↗2025-05-08

▶