Description
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.
Unscored
CVE-2023-40798
EUVD-2023-45349GHSA-mmrw-88mx-92rq
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting…
Published Aug 25, 2023 · Updated Oct 2, 2024 · Assigned by mitre