CVE-2023-41553
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 30, 2023
Updated: Aug 31, 2023
CWE ID 787
Summary
CVE-2023-41553 is a newly disclosed vulnerability affecting Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 wireless routers. The issue involves a stack overflow, which can be triggered via a manipulated parameter list in the /goform/SetStaticRouteCfg URL. Successful exploitation could result in unauthorized access or denial-of-service attacks. Users of these router models are advised to update to the latest firmware as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd