Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-40847


Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check.


Published

2023-08-30T17:15:10.877

Last Modified

2024-11-21T08:20:13.363

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-787

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tenda ac6_firmware 15.03.05.16 Yes
Hardware tenda ac6 1.0 No

References