Buffer Overflow Vulnerability in Tenda AC8v4 Router

CVE-2023-48194

What is CVE-2023-48194?

A newly identified vulnerability in the Tenda AC8v4 router arises from improper handling of input via the sscanf function, which causes buffer overflow issues. Specifically, during the execution of set_client_qos, the last digit of an internal variable is erroneously overwritten with a null byte. This exploitation can lead to unauthorized control over the gp register, allowing potential intruders to manipulate router functionality. Users of the Tenda AC8v4 are advised to assess their security measures and seek updates from the vendor.

References