Lucene search

K
nvd[email protected]NVD:CVE-2023-40897
HistoryAug 24, 2023 - 6:15 p.m.

CVE-2023-40897

2023-08-2418:15:08
CWE-787
web.nvd.nist.gov
5
tenda ac8 stack overflow
us_ac8v4.0si_v16.03.34.06_cn
parameter mac
getparentcontrolinfo

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.4%

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.

Affected configurations

Nvd
Node
tendaac8v4_firmwareMatch16.03.34.06
AND
tendaac8v4Match-
VendorProductVersionCPE
tendaac8v4_firmware16.03.34.06cpe:2.3:o:tenda:ac8v4_firmware:16.03.34.06:*:*:*:*:*:*:*
tendaac8v4-cpe:2.3:h:tenda:ac8v4:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.4%

Related for NVD:CVE-2023-40897