CVE-2023-49428

Summary

CVE-2023-49428 is a newly discovered vulnerability affecting the Tenda AX12 V22.03.01.46 firmware. This issue involves a command injection flaw in the 'mac' parameter of the /goform/SetOnlineDevName interface. An attacker can exploit this vulnerability by crafting a specially crafted MAC address input, potentially leading to remote code execution and compromise of the affected device. This security weakness poses a significant risk, and users are strongly advised to update their firmware as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.