CVE-2023-41557
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 30, 2023
Updated: Aug 31, 2023
CWE ID 787
Summary
CVE-2023-41557 affects Tenda AC7 V1.0 V15.03.06.44 and Tenda AC5 V1.0RTL_V15.03.06.28 routers. Hackers can exploit a stack overflow vulnerability through parameter entries and the mitInterface at the /goform/addressNat URL. Successful exploitation could result in a denial-of-service condition or potentially allow an attacker to gain unauthorized access to the router, leading to potential compromise of the network. Users are advised to update their router firmware as soon as a patch becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd