CVE-2023-41563

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 30, 2023
Updated: Sep 1, 2023
CWE ID 787

Summary

CVE-2023-41563 is a newly discovered stack overflow vulnerability affecting Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 devices. This issue can be exploited by sending maliciously crafted MAC parameters to the /goform/GetParentControlInfo URL. Successful exploitation could lead to a denial-of-service condition or potentially allow an attacker to execute arbitrary code and gain unauthorized access to the affected system. Users are advised to apply the latest security patches to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share