CVE-2023-40891

Summary

CVE-2023-40891 is a newly identified stack overflow vulnerability affecting Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn. This issue is located in the SetFirewallCfg goform with a parameter named firewallEn. A successful exploitation could result in the attacker gaining control of the device by overwhelming the stack memory. Users of this Tenda model are advised to update their firmware to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.