Lucene search

MitreCVE-2023-40896

HistoryAug 24, 2023 - 6:15 p.m.

CVE-2023-40896

2023-08-2418:15:07

CWE-787

mitre

web.nvd.nist.gov

cve-2023-40896

tenda ac8

stack overflow

/goform/setipmacbind

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.

Affected configurations

Nvd

Node

tendaac8v4_firmwareMatch16.03.34.06

AND

tendaac8v4Match-

VendorProductVersionCPE
tendaac8v4_firmware16.03.34.06cpe:2.3:o:tenda:ac8v4_firmware:16.03.34.06:*:*:*:*:*:*:*
tendaac8v4-cpe:2.3:h:tenda:ac8v4:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ac8v4_firmware	16.03.34.06	cpe:2.3:o:tenda:ac8v4_firmware:16.03.34.06:::::::*
tenda	ac8v4	-	cpe:2.3:h:tenda:ac8v4:-:::::::*

References

github.com/peris-navince/founded-0-days/blob/main/ac8/SetIpMacBind/1.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Related for CVE-2023-40896