CVE-2023-40900

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 24, 2023
Updated: Aug 29, 2023
CWE ID 787

Summary

CVE-2023-40900: A stack overflow vulnerability has been identified in the Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn firmware. This issue can be exploited by sending maliciously crafted data to the /goform/SetNetControlList endpoint. Successful exploitation could result in the attacker gaining control of the affected device or causing it to crash. Users are advised to update their firmware to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share