CVE-2023-27062

Name of the Vulnerable Software and Affected Versions Tenda V15 version V1.0

Description A buffer overflow issue was discovered via the gotoUrl parameter in the formPortalAuth function, allowing attackers to cause a Denial of Service (DoS) via a crafted request.

Recommendations For Tenda V15 version V1.0, as a temporary workaround, consider restricting access to the formPortalAuth function until a patch is available. Avoid using the gotoUrl parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.