CVE-2023-48194
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A vulnerability in Tenda AC8v4 firmware version V16.03.34.09 is caused by improper use of the sscanf function, which overwrites the last digit of the s8 variable with a null byte. After executing the set_client_qos command, control over the gp register can be obtained.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the device, potentially compromising the integrity and confidentiality of the local network.
Recommendation
It is recommended to immediately update the Tenda AC8v4 firmware to the latest available version that addresses this vulnerability.
Original NVD description (English source)
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.