Buffer Overflow Vulnerability in Tenda AC6 by Tenda

CVE-2023-40847

Summary

The Tenda AC6 router is susceptible to a buffer overflow vulnerability in the 'initIpAddrInfo' function. This issue occurs due to improper validation of user input; a parameter is passed without any length check, allowing potential attackers to exploit this flaw. Such exploitation may lead to unauthorized code execution or denial of service, posing significant risks to network security. It is essential for users of affected versions to apply necessary mitigations promptly.

References