Buffer Overflow Vulnerability in Tenda AX12 Router
CVE-2023-49427

7.5HIGH

Key Information:

Vendor

Tenda
Status
Ax12 Firmware
Vendor
CVE Published:
10 January 2024

What is CVE-2023-49427?

A vulnerability has been identified in Tenda AX12 firmware version V22.03.01.46 that allows remote attackers to exploit a buffer overflow in the SetNetControlList function. By manipulating the list parameter, unauthorized users can trigger a denial of service (DoS), impacting the device's availability. This security flaw poses a significant risk, particularly for users with vulnerable versions of the firmware who may not be aware of the potential for exploitation.

References

https://github.com/ef4tless/vuln/blob/master/iot/AX12/Set...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.