CVE-2023-33673

Name of the Vulnerable Software and Affected Versions Tenda AC8 versions 4.0-V16.03.34.06

Description The issue is related to a buffer overflow in the formSetFirewallCfg function of the Tenda AC8 router's firmware, allowing a remote attacker to execute arbitrary code. The vulnerability can be exploited via the firewallEn parameter in the formSetFirewallCfg function.

Recommendations For version 4.0-V16.03.34.06, as a temporary workaround, consider disabling the formSetFirewallCfg function until a patch is available. Restrict access to the firewallEn parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.