CVE-2023-40845
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_34FD0'. This function reads user-provided parameters and passes variables to another function without length checks.
Risk Assessment
Buffer overflow may lead to the execution of malicious code, posing a serious security threat to the device and the network it is installed in.
Recommendation
It is recommended to update the firmware to the latest version that includes security patches and to implement proper length checks for parameters in functions.
Original NVD description (English source)
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks.