PT-2023-20905 · Tenda · Tenda Ac10
CVE-2023-27021
·
Publicado
2023-04-07
·
Atualizado
2024-02-01
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda AC10 US AC10V4.0si V16.03.10.13 cn
Description
The issue is related to a stack overflow via the
formSetFirewallCfg function, allowing attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.Recommendations
For Tenda AC10 US AC10V4.0si V16.03.10.13 cn, as a temporary workaround, consider disabling the
formSetFirewallCfg function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tenda Ac10