CVE-2023-33673

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jun 2, 2023
Updated: Jan 8, 2025
CWE ID 787

Summary

CVE-2023-33673 is a newly identified vulnerability affecting the Tenda AC8V, specifically the AC8V4.0-V16.03.34.06 firmware. This issue stems from a stack overflow vulnerability, which can be triggered by manipulating the firewallEn parameter in the formSetFirewallCfg function. The consequence of a successful exploit may lead to denial-of-service conditions or even more severe unintended consequences, posing a significant threat to network security. Users are strongly advised to update their devices to the latest stable firmware to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share