CVE-2023-47455

Summary

CVE-2023-47455 is a newly disclosed vulnerability affecting the Tenda AX1806 V1.0.0.1 router. The issue involves a heap overflow in the setSchedWifi function, which occurs due to insufficient input validation. Specifically, the function directly uses the size of http request parameters schedStartTime and schedEndTime to allocate memory without checking their actual sizes, leading to a buffer overflow condition. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code or cause the router to crash, potentially leading to denial-of-service conditions. Users are advised to update their router firmware to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.