CVE-2023-33673
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jun 2, 2023
Updated: Jan 8, 2025
CWE ID 787
Summary
CVE-2023-33673 is a newly identified vulnerability affecting the Tenda AC8V, specifically the AC8V4.0-V16.03.34.06 firmware. This issue stems from a stack overflow vulnerability, which can be triggered by manipulating the firewallEn parameter in the formSetFirewallCfg function. The consequence of a successful exploit may lead to denial-of-service conditions or even more severe unintended consequences, posing a significant threat to network security. Users are strongly advised to update their devices to the latest stable firmware to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd