Stack Overflow Vulnerability in Tenda AC10 Router
CVE-2023-34567

6.7MEDIUM

Key Information:

Vendor

Tenda
Status
Ac10 Firmware
Vendor
CVE Published:
8 June 2023

What is CVE-2023-34567?

The Tenda AC10 router's firmware version US_AC10V4.0si_V16.03.10.13_cn is prone to a stack overflow vulnerability when processing input parameters at /goform/SetVirtualServerCfg. This flaw can be exploited by sending specially crafted requests, potentially allowing unauthorized access or control over the device, thereby compromising the integrity and security of the network.

References

https://hackmd.io/%400dayResearch/H1xUqzfHh

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-34567 : Stack Overflow Vulnerability in Tenda AC10 Router