CVE-2023-40904

Summary

CVE-2023-40904 is a newly discovered vulnerability affecting the Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn firmware. This issue stems from a stack overflow vulnerability, which can be triggered through maliciously crafted input to the macFilterType and deviceList parameters in the /goform/setMacFilterCfg endpoint. Successful exploitation of this flaw may lead to unintended application termination or potentially more serious consequences, such as remote code execution. Network administrators are advised to update their Tenda devices as soon as a patch becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.