Buffer Overflow Vulnerability in Tenda RX9 Pro HTTP Server Component
CVE-2023-43886

7.1HIGH

Key Information:

Vendor

Tenda
Status
Rx9 Pro Firmware
Vendor
CVE Published:
7 November 2023

What is CVE-2023-43886?

A buffer overflow vulnerability has been identified in the HTTP server component of Tenda RX9 Pro, version 22.03.02.20. This flaw could potentially allow an authenticated attacker to exploit the vulnerability and overwrite critical memory, leading to undefined behavior in the affected system.

References

https://blog.rtlcopymemory.com/tenda-rx9-pro/

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.