CVE-2023-49433

Summary

CVE-2023-49433 is a stack overflow vulnerability identified in Tenda AX9 V22.03.01.46. The issue lies in the 'list' parameter found in the '/goform/SetVirtualServerCfg' section of the software. If an attacker successfully exploits this flaw, they can cause the stack to overflow, potentially leading to unintended code execution or system crashes. This vulnerability poses a significant risk to users running the affected firmware version and necessitates immediate patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.