CVE-2023-50985

CriticalCVSS 9.8

Published: 20/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda i29 router version V1.0.0.5 in the lanCfgSet function via the lanGw parameter. An attacker can exploit this flaw to execute arbitrary code or cause a denial of service.

Risk Assessment

The risk involves potential remote code execution or device crash, leading to network disruption and data security compromise.

Recommendation

Immediately update the Tenda i29 firmware to the latest patched version if available. Otherwise, restrict management interface access to trusted networks only.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.