CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg...

CVE-2023-49430

Tenda AX9 (V22.03.01.46) contains a stack overflow in the /goform/SetStaticRouteCfg endpoint, triggered by the 'list' parameter failing to properly validate input length. This is a remote, network-vector vulnerability with high impact (remote code execution or DoS) as reported across multiple sou...