CVE-2023-39829
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-39829 is a newly disclosed vulnerability affecting the Tenda A18 router running version V15.13.07.09. This issue involves a stack overflow vulnerability located in the fromSetWirelessRepeat function, specifically in the wpapsk_crypto2_4g parameter. An attacker could potentially exploit this weakness by sending specially crafted packets to trigger the overflow and gain unauthorized access to the router's system. The impact of this vulnerability could lead to a denial of service or even complete takeover of the device. It is highly recommended that users update their Tenda A18 routers to the latest firmware version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd