CVE-2023-41562

CriticalCVSS 9.8

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.70%

48th percentile - higher than 48% of all known CVEs

Summary

Tenda AC7 V1.0, AC9 V3.0, and AC5 US devices were found to have a stack overflow vulnerability via the 'time' parameter at the URL /goform/PowerSaveSet.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code, potentially leading to device takeover.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Related vulnerabilities

CVE-2026-79876Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79875Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79874Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79873Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79872Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79871Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79870Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79869Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79868Critical
No vulnerability description was provided in the supplied NVD data. Technical details and the affected component cannot be determined from the available information.
CVE-2026-79867Critical
No vulnerability description is available in the NVD. The nature and scope of the issue cannot be determined from the provided data.

Original NVD description (English source)

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter time at url /goform/PowerSaveSet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS