CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd...

CVE-2023-38823

Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd...

CVE-2023-38823

CVE-2023-38823 describes a Buffer Overflow in Tenda AC19 v1.0, AC18, AC9 v1.0, and AC6 v2.0/v1.0, caused by a vulnerable formSetCfm function in bin/httpd. A remote attacker can trigger arbitrary code execution via POST to /goform/setcfm by sending crafted name*/value* pairs (PoC shows constructin...