Stack Overflow Vulnerability in Tenda AC10 Router
CVE-2023-34571

6.7MEDIUM

Key Information:

Vendor
Tenda
Status
Ac10 Firmware
Vendor
CVE Published:
8 June 2023

Summary

A stack overflow vulnerability has been identified in the Tenda AC10 router, specifically affecting the WiFiGuestSet function through the shareSpeed parameter. This flaw could allow an attacker to exploit the device, potentially leading to unauthorized access or denial of service. Proper attention to this issue is essential for maintaining network security and protecting sensitive information.

References

https://hackmd.io/%400dayResearch/S1GcUxzSn

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.