Stack Overflow Vulnerability in Tenda W30E Router
CVE-2023-49404

9.8CRITICAL

Key Information:

Vendor

Tenda
Status
W30e Firmware
Vendor
CVE Published:
7 December 2023

What is CVE-2023-49404?

The Tenda W30E router version V16.01.0.12(4843) is susceptible to a stack overflow vulnerability discovered in the function formAdvancedSetListSet. This vulnerability can potentially allow an attacker to execute arbitrary code or cause the router to crash, leading to a denial of service. Users of this affected product should consider updating their firmware or implementing additional security measures to mitigate the risks associated with this vulnerability.

References

https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-49404 : Stack Overflow Vulnerability in Tenda W30E Router