Stack Overflow in Tenda AC10 Firewall Configuration
CVE-2023-45481
9.8CRITICAL
Summary
A stack overflow vulnerability has been identified in the Tenda AC10 router, specifically in the firewall configuration feature. This issue arises when input is processed via the firewallEn parameter in the SetFirewallCfg function, potentially leading to unauthorized access or interference with firewall settings. Users of the affected version should take immediate steps to secure their devices by applying available updates and monitor for any unusual activities in their network.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved