CVE-2023-40847
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in the 'initIpAddrInfo' function. This function reads a user-provided parameter, and the variable is passed to the function without any length check.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the system or execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update the software to the latest version that addresses this vulnerability and to implement additional security measures such as input data filtering.
Original NVD description (English source)
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check.