PT-2024-13555 · Tenda · Tenda Ac8V4

Published 2024-07-06 · Updated 2024-10-24 · CVE-2023-48194

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC8v4 version .V16.03.34.09

Description The issue arises due to the sscanf function and the last digit of s8 being overwritten with x0. After executing the set client qos function, control over the gp register can be obtained.

Recommendations For Tenda AC8v4 version .V16.03.34.09, consider disabling the set client qos function until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-48194

Affected Products

Tenda Ac8V4

References · 9

• 🔥 https://github.com/zt20xx/CVE-2023-48194 · Exploit
• https://osv.dev/vulnerability/CVE-2023-48194 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-48194 · Security Note
• https://t.me/cvenotify/86086 · Telegram Post
• https://t.me/cvenotify/99407 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1809597428208652390 · Twitter Post
• http://tenda.com · Note
• https://tenda.com.cn/download/detail-3683.html · Note
• https://twitter.com/CVEnew/status/1811062966369808485 · Twitter Post