CVE-2023-41554

CriticalCVSS 9.8

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.70%

48th percentile - higher than 48% of all known CVEs

The Tenda AC9 V3.0 version V15.03.06.42_multi was found to contain a stack overflow via the wpapsk_crypto parameter at the URL /goform/WifiExtraSet.

This vulnerability could lead to remote code execution, posing a serious security threat to the organization's network.

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet.