CVE-2023-40901 - Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg

Back Back to CVE browser

CRITICAL

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg

Published Aug 24, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.27%

Description

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg.

Affected products

Vendor Tenda Product Ac10 Default
n/a
- Version
  v4_us_ac10v4.0si_v16.03.10.13_cn
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

Ac10

n/a

Version	Status	Constraints
v4_us_ac10v4.0si_v16.03.10.13_cn	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (4)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45440		Advisory
https://github.com/peris-navince/founded-0-days/blob/main/ac10/formSetMacFilterCfg/1.md
https://github.com/peris-navince/founded-0-days/blob/main/ac10/fromSetStaticRouteCfg/1.md		ExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-40901