Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-98204
HistoryDec 01, 2023 - 12:00 a.m.

Tenda AC10 compare_parentcontrol_time function buffer overflow vulnerability

2023-12-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
tenda ac10
wireless router
buffer overflow
vulnerability
time parameter
compare_parentcontrol_time
remote attacker
arbitrary code
denial of service
cnvd

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.4%

The Tenda AC10 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn version, which stems from the time parameter of the compare_parentcontrol_time function failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on the system or to cause a denial of service attack. cause a denial-of-service attack.

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.4%

Related for CNVD-2023-98204