CVE-2023-40942

Summary

CVE-2023-40942 is a newly discovered vulnerability affecting Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 routers. The issue stems from a stack overflow vulnerability, which can be exploited by sending maliciously crafted data to the router via the 'firewall_value' parameter in the URL '/goform/SetFirewallCfg'. Successful exploitation of this vulnerability could potentially allow an attacker to execute arbitrary code or cause the router to crash, leading to a denial-of-service condition. Users are urged to update their routers to the latest firmware to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.