CVE-2023-33670
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability in the sub_4a79ec function via the time parameter.
Risk Assessment
Stack overflow may lead to the execution of malicious code, posing a serious threat to the security of the system and user data.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda AC8V4.0-V16.03.34.06
See all- CVE-2023-33675Critical
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability in the get_parentControl_list_Info function due to the time parameter.
- CVE-2023-33673Critical
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
- CVE-2023-33671Critical
A stack overflow was discovered in the Tenda AC8V4.0-V16.03.34.06 related to the deviceId parameter in the saveParentControlInfo function.
- CVE-2023-33669Critical
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.
- CVE-2023-33672High
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability via the shareSpeed parameter in the fromSetWifiGusetBasic function.
Original NVD description (English source)
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.