Cyber Resilience

CVE-2023-51092

CriticalPublic PoC

Published: 26 December 2023

Published
26 December 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.1298 94.2th percentile
Risk Priority 27 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-51092 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Tenda M3 Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 5.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

Deeper analysis

Tenda M3 firmware version 1.0.0.12(4856) contains a stack-based buffer overflow in the upgrade function, classified under CWE-787 as an out-of-bounds write. The flaw received a CVSS 3.1 score of 9.8, reflecting network-accessible, unauthenticated exploitation with no user interaction required and full impact on confidentiality, integrity, and availability.

An attacker with network reachability to the device can supply a crafted request to the upgrade endpoint, triggering the overflow to execute arbitrary code or crash the system. Because the vector requires neither credentials nor user assistance, the exposure applies to any internet-facing or locally reachable Tenda M3 instance running the affected build.

Public references consist of technical write-ups hosted on GitHub that demonstrate the overflow condition; they do not describe vendor patches or official mitigation steps. The associated EPSS score reached a peak of 0.1616 and currently stands at 0.1298, indicating moderate and sustained exploitation interest after disclosure.

EU & UK References

Vulnerability details

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.

CWE(s)
CWE-787

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
Why these techniques?

Stack overflow in the router's upgrade function enables remote code execution on a public-facing network device, directly facilitating T1190 (Exploit Public-Facing Application).

Affected Assets

tenda
m3 firmware
1.0.0.12\(4856\)

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SI-16 Memory Protection
addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.

References