CVE-2023-34566
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
Risk Assessment
Stack overflow may lead to remote code execution, posing a serious security threat to the device and network.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn
See all- CVE-2023-40902Critical
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability due to improper handling of parameter list and bindnum at the /goform/SetIpMacBind endpoint.
- CVE-2023-40901Critical
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability via the macFilterType and deviceList parameters at the URL /goform/setMacFilterCfg.
- CVE-2023-34570Medium
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability via the devName parameter at the /goform/SetOnlineDevName endpoint.
- CVE-2023-34567Medium
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow via parameter list at the endpoint /goform/SetVirtualServerCfg.
Original NVD description (English source)
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo.