Stack Overflow Vulnerability in Tenda AC23
CVE-2023-24334

Currently unrated

Key Information:

Vendor: Tenda Technology
Status: Ac23 Firmware
Vendor: CVE Published:; 21 February 2024

🔔 Create Tenda Technology Vulnerability Alert

What is CVE-2023-24334?

A stack overflow vulnerability exists in the Tenda AC23 router firmware, specifically in version US_AC23V1.0re_V16.03.07.45_cn_TDC01. The vulnerability arises from improper handling of the schedStartTime parameter, allowing attackers to craft specially designed requests that can lead to arbitrary command execution. This exploitation can compromise the security of the affected device, potentially allowing unauthorized access and control over the network.

References

https://github.com/caoyebo/CVE/tree/main/TENDA%20AC23%20-...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 21, 2024
Vulnerability Reserved
Jan 23, 2023