CVE-2023-50987

CriticalCVSS 9.8

Published: 20/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

51th percentile - higher than 51% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda i29 device version V1.0.0.5 in the sysTimeInfoSet function via the time parameter. An attacker can exploit this flaw to execute arbitrary code remotely or cause a system crash.

Risk Assessment

The risk includes potential remote code execution, which could lead to network compromise, data leakage, or service disruption.

Recommendation

Immediately update the Tenda i29 firmware to the latest version that addresses this vulnerability. If no update is available, restrict device access to trusted networks only.

Original NVD description (English source)

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.