Buffer Overflow Vulnerability in Tenda AC Series Routers

CVE-2023-38935

What is CVE-2023-38935?

A buffer overflow vulnerability exists in the Tenda AC series routers through the list parameter in the formSetQosBand function. Exploiting this weakness could potentially allow an attacker to gain unauthorized access and control over the affected devices. This impacts Tenda router models AC1206, AC8, AC5, AC10, and AC9, highlighting the importance of securing network devices against such vulnerabilities.

References