Lucene search

MitreVULNRICHMENT:CVE-2023-48194

HistoryJul 09, 2024 - 12:00 a.m.

CVE-2023-48194

2024-07-0900:00:00

mitre

github.com

tenda ac8v4

v16.03.34.09

vulnerability

sscanf overwrite

gp register control

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

47.4%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:tenda:ac8_firmware:16.03.34.09:*:*:*:*:*:*:*"
    ],
    "vendor": "tenda",
    "product": "ac8_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "16.03.34.09"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

tenda.com

github.com/zt20xx/CVE-2023-48194