CVE-2023-40894

Summary

CVE-2023-40894 is a newly identified vulnerability affecting the Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn firmware. This issue involves a stack overflow, which can be triggered by sending maliciously crafted parameter lists to the /goform/SetStaticRouteCfg endpoint. Successful exploitation of this vulnerability could result in unintended application behavior, leading to potential security compromises or denial of service conditions. Users are strongly advised to update their devices to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.