Lucene search

MitreCVE-2023-39786

HistoryAug 21, 2023 - 1:15 a.m.

CVE-2023-39786

2023-08-2101:15:09

CWE-787

mitre

web.nvd.nist.gov

cve-2023-39786

tenda ac8v4

v16.03.34.06

stack overflow

vulnerability

nvd

security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.1%

JSON

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.

Affected configurations

Nvd

Node

tendaac8v4_firmwareMatch16.03.34.06

AND

tendaac8v4Match-

VendorProductVersionCPE
tendaac8v4_firmware16.03.34.06cpe:2.3:o:tenda:ac8v4_firmware:16.03.34.06:*:*:*:*:*:*:*
tendaac8v4-cpe:2.3:h:tenda:ac8v4:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ac8v4_firmware	16.03.34.06	cpe:2.3:o:tenda:ac8v4_firmware:16.03.34.06:::::::*
tenda	ac8v4	-	cpe:2.3:h:tenda:ac8v4:-:::::::*

References

tenda.com

github.com/Xunflash/IOT/tree/main/Tenda_AC8_V4/3

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.1%

JSON

Related for CVE-2023-39786