Buffer Overflow Vulnerability in Tenda AC Series Routers
CVE-2023-38935
9.8CRITICAL
Summary
A buffer overflow vulnerability exists in the Tenda AC series routers through the list parameter in the formSetQosBand function. Exploiting this weakness could potentially allow an attacker to gain unauthorized access and control over the affected devices. This impacts Tenda router models AC1206, AC8, AC5, AC10, and AC9, highlighting the importance of securing network devices against such vulnerabilities.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved