CVE-2023-49434

Name of the Vulnerable Software and Affected Versions Tenda AX9 version V22.03.01.46

Description A stack overflow issue has been identified in the list parameter at the "/goform/SetNetControlList" API endpoint. This issue can be exploited, potentially leading to unintended consequences.

Recommendations For Tenda AX9 version V22.03.01.46, as a temporary workaround, consider restricting access to the "/goform/SetNetControlList" API endpoint to minimize the risk of exploitation. Avoid using the list parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.