CVE-2023-41561

Summary

CVE-2023-41561 is a newly-discovered stack overflow vulnerability affecting Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 devices. This issue can be exploited via the /goform/SetPptpServerCfg URL by supplying maliciously crafted startIp and endIp parameters. The stack overflow occurs due to insufficient boundary checks, potentially causing memory corruption and allowing an attacker to execute arbitrary code or cause a denial-of-service condition. Users are advised to update their devices as soon as patches become available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.