Stack Overflow Vulnerability in Tenda AC23
CVE-2023-24334

Currently unrated

Key Information:

Vendor
Tenda Technology
Status
Ac23 Firmware
Vendor
CVE Published:
21 February 2024

Summary

A stack overflow vulnerability exists in the Tenda AC23 router firmware, specifically in version US_AC23V1.0re_V16.03.07.45_cn_TDC01. The vulnerability arises from improper handling of the schedStartTime parameter, allowing attackers to craft specially designed requests that can lead to arbitrary command execution. This exploitation can compromise the security of the affected device, potentially allowing unauthorized access and control over the network.

References

https://github.com/caoyebo/CVE/tree/main/TENDA%20AC23%20-...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.