CVE-2023-50585

Summary

CVE-2023-50585 is a newly disclosed vulnerability affecting the Tenda A18 router running version 15.13.07.09. This issue arises due to a stack overflow vulnerability in the formSetDeviceName function, which can be triggered by a maliciously crafted devName parameter. Successful exploitation could lead to arbitrary code execution, potentially allowing attackers to take control of the affected device or gain unauthorized access to the network. Users are strongly urged to update their Tenda A18 firmware to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.