CVE-2023-39786

Summary

CVE-2023-39786 is a newly disclosed vulnerability affecting Tenda AC8V4 V16.03.34.06 firmware. This issue arises due to a stack overflow vulnerability in the sscanf function, which can be triggered through a maliciously crafted time parameter. The exploitation of this vulnerability could potentially lead to remote code execution or a denial-of-service condition, posing a significant risk to affected devices and networks. Users are urged to apply the available patch as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.