CVE-2023-40899

Summary

CVE-2023-40899 is a newly discovered vulnerability affecting the Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn firmware. This issue involves a stack overflow, which can be triggered by maliciously crafted inputs to the macFilterType and deviceList parameters in the /goform/setMacFilterCfg endpoint. Successful exploitation of this vulnerability could lead to denial of service conditions or potentially more serious consequences, such as remote code execution. Users are strongly urged to update their firmware to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.