CVE-2023-40892

Summary

CVE-2023-40892 is a newly disclosed vulnerability affecting the Tenda AC8 v4 router with firmware US_AC8V4.0si_V16.03.34.06_cn. This issue involves a stack overflow, which can be exploited by an attacker through the parameters schedStartTime and schedEndTime when accessing the /goform/openSchedWifi endpoint. By sending carefully crafted input to these parameters, an attacker can cause the router to exceed the stack limit, leading to a denial-of-service condition or potentially gaining control of the device. This vulnerability poses a risk to network security and should be addressed with an immediate firmware update from the vendor.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.