CVE-2023-40843
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function 'sub_73004'.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system or execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin
See all- CVE-2023-40848Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_7D858'.
- CVE-2023-40847Critical
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'initIpAddrInfo' function. This function reads a user-provided parameter, and the variable is passed to the function without any length check.
- CVE-2023-40845Critical
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_34FD0'. This function reads user-provided parameters and passes variables to another function without length checks.
- CVE-2023-40844Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'formWifiBasicSet' function.
- CVE-2023-40841Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'add_white_node' function.
- CVE-2023-40840Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'fromGetWirelessRepeat' function.
- CVE-2023-40838Critical
The 'sub_3A1D0' function in Tenda AC6 firmware contains a command execution vulnerability, allowing attackers to remotely execute code.
- CVE-2023-40846Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function sub_90998.
Original NVD description (English source)
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004."