CVE-2023-40845
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_34FD0'. This function reads user-provided parameters and passes variables to another function without length checks.
Risk Assessment
Buffer overflow may lead to the execution of malicious code, posing a serious security threat to the device and the network it is installed in.
Recommendation
It is recommended to update the firmware to the latest version that includes security patches and to implement proper length checks for parameters in functions.
Other vulnerabilities in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin
See all- CVE-2023-40848Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the function 'sub_7D858'.
- CVE-2023-40847Critical
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'initIpAddrInfo' function. This function reads a user-provided parameter, and the variable is passed to the function without any length check.
- CVE-2023-40844Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'formWifiBasicSet' function.
- CVE-2023-40843Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function 'sub_73004'.
- CVE-2023-40841Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'add_white_node' function.
- CVE-2023-40840Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'fromGetWirelessRepeat' function.
- CVE-2023-40838Critical
The 'sub_3A1D0' function in Tenda AC6 firmware contains a command execution vulnerability, allowing attackers to remotely execute code.
- CVE-2023-40846Critical
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function sub_90998.
Original NVD description (English source)
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks.