CVE-2023-40838
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
The 'sub_3A1D0' function in Tenda AC6 firmware contains a command execution vulnerability, allowing attackers to remotely execute code.
Risk Assessment
This vulnerability could lead to device takeover, posing a significant security risk to the network.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin
See all- CVE-2023-40848Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_7D858'.
- CVE-2023-40847Critical
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'initIpAddrInfo' function. This function reads a user-provided parameter, and the variable is passed to the function without any length check.
- CVE-2023-40845Critical
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_34FD0'. This function reads user-provided parameters and passes variables to another function without length checks.
- CVE-2023-40844Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'formWifiBasicSet' function.
- CVE-2023-40843Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function 'sub_73004'.
- CVE-2023-40841Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'add_white_node' function.
- CVE-2023-40840Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'fromGetWirelessRepeat' function.
- CVE-2023-40846Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function sub_90998.
Original NVD description (English source)
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability.