CVE-2023-40900
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 24, 2023
Updated: Aug 29, 2023
CWE ID 787
Summary
CVE-2023-40900: A stack overflow vulnerability has been identified in the Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn firmware. This issue can be exploited by sending maliciously crafted data to the /goform/SetNetControlList endpoint. Successful exploitation could result in the attacker gaining control of the affected device or causing it to crash. Users are advised to update their firmware to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd