CVE-2023-34570
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability via the devName parameter at the /goform/SetOnlineDevName endpoint.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code, potentially leading to device takeover.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn
See all- CVE-2023-40902Critical
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability due to improper handling of parameter list and bindnum at the /goform/SetIpMacBind endpoint.
- CVE-2023-40901Critical
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability via the macFilterType and deviceList parameters at the URL /goform/setMacFilterCfg.
- CVE-2023-34566Critical
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.
- CVE-2023-34567Medium
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow via parameter list at the endpoint /goform/SetVirtualServerCfg.
Original NVD description (English source)
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName.