CVE-2023-41553

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 30, 2023
Updated: Aug 31, 2023
CWE ID 787

Summary

CVE-2023-41553 is a newly disclosed vulnerability affecting Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 wireless routers. The issue involves a stack overflow, which can be triggered via a manipulated parameter list in the /goform/SetStaticRouteCfg URL. Successful exploitation could result in unauthorized access or denial-of-service attacks. Users of these router models are advised to update to the latest firmware as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share