CVE-2023-49404

Summary

CVE-2023-49404 is a newly identified vulnerability affecting the Tenda W30E V16.01.0.12(4843) firmware. It was discovered that this version contains a stack overflow issue, specifically within the function formAdvancedSetListSet. This flaw can be exploited by an attacker to cause the device to crash, potentially leading to denial-of-service conditions or remote code execution. Users are advised to update their firmware to an unaffected version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.