CVE-2023-40843

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 30, 2023
Updated: Sep 7, 2023
CWE ID 787

Summary

CVE-2023-40843 is a newly disclosed vulnerability affecting the Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin firmware. This issue arises due to a buffer overflow condition in the "sub_73004" function, which can be exploited by an attacker to execute arbitrary code. The vulnerability poses a significant risk, as successful exploitation could lead to unauthorized access, data theft, or system crashes. To mitigate this risk, it is recommended that users update their Tenda routers to the latest firmware version as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share