CVE-2023-40802

Name of the Vulnerable Software and Affected Versions Tenda AC23 version 16.03.07.45 cn

Description The issue arises from the get parentControl list Info function not verifying user-entered parameters, leading to a post-authentication heap overflow. This allows for potential exploitation after a user has authenticated.

Recommendations For Tenda AC23 version 16.03.07.45 cn, as a temporary workaround, consider disabling the get parentControl list Info function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.