CVE-2023-40894
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
The Tenda AC8 v4 device has a stack overflow vulnerability due to improper handling of the parameter list at the endpoint /goform/SetStaticRouteCfg.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code, potentially leading to control over the device.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda AC8 v4
See all- CVE-2023-4744Critical
A critical vulnerability was found in Tenda AC8 version 16.03.34.06_cn_TDC01 in the formSetDeviceName function, leading to stack-based buffer overflow. The vulnerability can be exploited remotely.
- CVE-2025-61498High
A buffer overflow vulnerability in the UPnP service of Tenda AC8 hardware version v03.03.10.01 allows an attacker to cause a Denial of Service (DoS) by sending a crafted packet.
Original NVD description (English source)
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.