CVE-2023-40839

CVE-2023-40839 affects the Tenda AC6 router (US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin). The vulnerability is in the internal function sub_ADF3C where the router passes unfiltered values from the list and vlanId fields in the formSetIptv flow to sub_ADF3C, enabling arbitrary command execution . Pu...