CVE-2023-34570

Summary

CVE-2023-34570 is a newly disclosed vulnerability affecting the Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn firmware. The issue involves a stack overflow vulnerability, which can be triggered by a specially crafted devName parameter in the /goform/SetOnlineDevName interface. Successful exploitation of this vulnerability may lead to a denial-of-service condition or even remote code execution, posing a significant risk to network security. It is essential that users update their Tenda AC10 devices to the latest, secure firmware version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.