CVE-2023-39829
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Tenda A18 version V15.13.07.09, occurring via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function.
Risk Assessment
Stack overflow can lead to the execution of malicious code, posing a serious threat to network and user data security.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda A18 V15.13.07.09
See all- CVE-2023-39828High
The Tenda A18 device in version V15.13.07.09 was found to contain a stack overflow vulnerability in the formWifiBasicSet function via the security parameter.
- CVE-2023-39827High
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function.
Original NVD description (English source)
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function.