CVE-2023-40801

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Aug 25, 2023
Updated: Aug 29, 2023
CWE ID 20

Summary

CVE-2023-40801 is a stack overflow vulnerability affecting Tenda AC23 routers running version 16.03.07.45_cn. The sub_451784 function fails to validate user input, allowing for malicious data to be entered and causing the stack to overflow. This issue can potentially be exploited by attackers to execute arbitrary code and gain unauthorized access to the affected device. Users are advised to update their routers to the latest available firmware to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share