CVE-2023-49426

Summary

CVE-2023-49426 is a newly disclosed vulnerability affecting Tenda AX12 V22.03.01.46 routers. This issue involves a stack overflow vulnerability, which can be triggered by sending maliciously crafted data to the /goform/SetStaticRouteCfg endpoint through the list parameter. Successful exploitation of this vulnerability could lead to a denial-of-service condition or potentially more serious consequences, such as unauthorized access or data theft. Users of the affected router version are strongly urged to apply the necessary patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.