CVE-2023-40839

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 30, 2023
Updated: Sep 7, 2023
CWE ID 78

Summary

CVE-2023-40839 is a vulnerability affecting the Tenda AC6 US/AC6V1.0BR_V15.03.05.16 firmware. The issue lies within the 'sub_ADF3C' function in the 'formSetIptv' process. An attacker can exploit this command execution vulnerability by passing unfiltered 'list' and 'vlanId' fields as parameters to 'sub_ADF3C', enabling the execution of arbitrary commands on the affected device.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share