CVE-2023-49403

Name of the Vulnerable Software and Affected Versions Tenda W30E version 16.01.0.12(4843)

Description The issue is related to a command injection vulnerability via the setFixTools function. This vulnerability may allow a remote attacker to execute arbitrary commands. The vulnerability is also associated with a buffer overflow in memory, which can be exploited to achieve remote code execution.

Recommendations For Tenda W30E version 16.01.0.12(4843), consider disabling the setFixTools function as a temporary workaround until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.