PT-2023-4239 · Tenda · Tenda Ac7+7

Published 2023-07-03 · Updated 2023-08-10 · CVE-2023-38931

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda AC10 version V1.0 V15.03.06.23 Tenda AC1206 version V15.03.06.23 Tenda AC8 v4 version V16.03.34.06 Tenda AC6 V2.0 version V15.03.06.23 Tenda AC7 V1.0 version V15.03.06.44 Tenda F1203 version V2.0.1.6 Tenda AC5 V1.0 version V15.03.06.28 Tenda AC10 v4.0 version V16.03.10.13 Tenda FH1203 version V2.0.1.6

Description The issue is related to a stack overflow in the setaccount function when handling the list parameter, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For Tenda AC10 version V1.0 V15.03.06.23, consider disabling the setaccount function until a patch is available. For Tenda AC1206 version V15.03.06.23, restrict access to the setaccount function to minimize the risk of exploitation. For Tenda AC8 v4 version V16.03.34.06, avoid using the list parameter in the setaccount function until the issue is resolved. For Tenda AC6 V2.0 version V15.03.06.23, temporarily disable the setaccount function to prevent potential attacks. For Tenda AC7 V1.0 version V15.03.06.44, restrict access to the setaccount function to minimize the risk of exploitation. For Tenda F1203 version V2.0.1.6, consider disabling the setaccount function until a patch is available. For Tenda AC5 V1.0 version V15.03.06.28, avoid using the list parameter in the setaccount function until the issue is resolved. For Tenda AC10 v4.0 version V16.03.10.13, temporarily disable the setaccount function to prevent potential attacks. For Tenda FH1203 version V2.0.1.6, restrict access to the setaccount function to minimize the risk of exploitation.

Exploit

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-04554

CVE-2023-38931

Affected Products

Tenda Ac10

Tenda Ac10 V4.0

Tenda Ac1206

Tenda Ac5

Tenda Ac6

Tenda Ac7

Tenda Ac8

Tenda F1203

References · 8

• 🔥 https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/cloudv2_setaccount/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-38931 · Security Note
• https://bdu.fstec.ru/vul/2023-04554 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38931 · Vendor Advisory
• https://t.me/cvenotify/55939 · Telegram Post
• https://vuldb.com/?id.236326 · Note
• https://t.me/cibsecurity/67915 · Telegram Post
• https://github.com/advisories/GHSA-98fv-pj8r-pcqr · Note