CVE Catalog

CVE-2023-33671

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.86%

54th percentile - higher than 54% of all known CVEs

Summary

A stack overflow was discovered in the Tenda AC8V4.0-V16.03.34.06 related to the deviceId parameter in the saveParentControlInfo function.

Risk Assessment

The stack overflow may allow for the execution of malicious code, posing a significant security risk to the device and network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS