Stack Overflow Vulnerability in Tenda AC10 Router
CVE-2023-34568

6.7MEDIUM

Key Information:

Vendor
Tenda
Status
Ac10 Firmware
Vendor
CVE Published:
8 June 2023

Summary

A stack overflow vulnerability was identified in the Tenda AC10 router, specifically within the PowerSaveSet function. This issue is triggered by improper handling of the 'time' parameter, allowing potential attackers to exploit the flaw. By sending crafted inputs, an attacker could execute arbitrary code, leading to unauthorized access and control over the device. Users of affected versions should apply patches or updates promptly to mitigate risks associated with this vulnerability.

References

https://hackmd.io/%400dayResearch/ryR8IzMH2

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.