CVE-2023-40838

CriticalCVSS 9.8

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.05%

60th percentile - higher than 60% of all known CVEs

The 'sub_3A1D0' function in Tenda AC6 firmware contains a command execution vulnerability, allowing attackers to remotely execute code.

This vulnerability could lead to device takeover, posing a significant security risk to the network.

It is recommended to update the firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.