Heap Overflow Vulnerability in Tenda AX1803 Wireless Router

CVE-2023-49042

Summary

A heap overflow vulnerability exists in Tenda AX1803 version 1.0.0.1, which can be exploited by remote attackers to execute arbitrary code. This occurs when user input for the schedStartTime and schedEndTime parameters is not properly validated within the setSchedWifi function. Consequently, malicious entities could take control of the affected device, leading to unauthorized actions and a potential compromise of network security.

References