CVE-2023-41563
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 30, 2023
Updated: Sep 1, 2023
CWE ID 787
Summary
CVE-2023-41563 is a newly discovered stack overflow vulnerability affecting Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 devices. This issue can be exploited by sending maliciously crafted MAC parameters to the /goform/GetParentControlInfo URL. Successful exploitation could lead to a denial-of-service condition or potentially allow an attacker to execute arbitrary code and gain unauthorized access to the affected system. Users are advised to apply the latest security patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd