PT-2023-27105 · Tenda · Tenda Ac8V4

CVE-2023-39785 · Publicado 2023-08-02 · Atualizado 2025-12-08

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06

Description A stack overflow issue was discovered via the list parameter in the set qosMib list function. This issue affects the Tenda AC8V4 router.

Recommendations For Tenda AC8V4 version 16.03.34.06, consider disabling the set qosMib list function until a patch is available to prevent exploitation of the stack overflow issue.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2026-00792

CVE-2023-39785

Produtos afetados

Tenda Ac8V4

Referências · 8

• 🔥 https://github.com/Xunflash/IOT/tree/main/Tenda_AC8_V4/2 · Exploit
• https://t.me/cvenotify/57183 · Publicação no Telegram
• https://t.me/cvenotify/56960 · Publicação no Telegram
• http://tenda.com · Nota
• https://bdu.fstec.ru/vul/2026-00792 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-39785 · Aviso do Fabricante
• https://t.me/cveNotify/145102 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-39785 · Nota de Segurança