CVE-2023-40798

Summary

CVE-2023-40798 is a newly identified vulnerability affecting Tenda AC23 routers running version v16.03.07.45_cn. This issue arises due to the formSetIPv6status and formGetWanParameter functions, which fail to authenticate user input parameters during post-authentication processes. Consequently, an attacker can exploit this flaw to trigger a stack overflow, potentially gaining unauthorized control over the affected device. This vulnerability poses a significant risk to users, making it essential to apply the necessary patches or updates as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.