CVE-2023-40843
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 30, 2023
Updated: Sep 7, 2023
CWE ID 787
Summary
CVE-2023-40843 is a newly disclosed vulnerability affecting the Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin firmware. This issue arises due to a buffer overflow condition in the "sub_73004" function, which can be exploited by an attacker to execute arbitrary code. The vulnerability poses a significant risk, as successful exploitation could lead to unauthorized access, data theft, or system crashes. To mitigate this risk, it is recommended that users update their Tenda routers to the latest firmware version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd