Stack Overflow Vulnerability in Tenda M3 from Tenda

CVE-2023-51092

Summary

A stack overflow vulnerability has been identified in the Tenda M3 device, specifically in version V1.0.0.12. This vulnerability arises from a flaw in the function responsible for initiating upgrades, making it possible for an attacker to exploit this weakness and execute arbitrary code. Such vulnerabilities can lead to unauthorized control over the device, potentially compromising the entire network security framework. It is essential for users to apply necessary updates or mitigations to safeguard their devices against potential exploits.

References