CVE-2023-34571

Summary

CVE-2023-34571 is a newly disclosed stack overflow vulnerability affecting Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn. The issue is located in the /goform/WifiGuestSet interface, specifically the shareSpeed parameter. An attacker can exploit this vulnerability by sending maliciously crafted input, leading to a stack overflow condition. Successful exploitation could result in denial-of-service or potentially allow code injection and unauthorized access to the device. Users are advised to update their devices as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.