CVE-2023-33675
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability in the get_parentControl_list_Info function due to the time parameter.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code, potentially leading to control over the device.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda AC8V4.0-V16.03.34.06
See all- CVE-2023-33673Critical
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
- CVE-2023-33671Critical
A stack overflow was discovered in the Tenda AC8V4.0-V16.03.34.06 related to the deviceId parameter in the saveParentControlInfo function.
- CVE-2023-33670Critical
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability in the sub_4a79ec function via the time parameter.
- CVE-2023-33669Critical
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.
- CVE-2023-33672High
The Tenda AC8V4.0-V16.03.34.06 device was found to contain a stack overflow vulnerability via the shareSpeed parameter in the fromSetWifiGusetBasic function.
Original NVD description (English source)
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function.