First published: Fri Apr 07 2023(Updated: )
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Tenda Ac5 Firmware | =15.03.06.28 | |
Tenda AC5 | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-25211 is a vulnerability discovered in Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 firmware that allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25211 affects Tenda AC5 firmware version 15.03.06.28 by allowing attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-25211 has a severity rating of critical, with a score of 9.8 out of 10.
To fix CVE-2023-25211 in Tenda AC5 firmware version 15.03.06.28, it is recommended to update to a patched version provided by the vendor.
More information about CVE-2023-25211 can be found at the following reference: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/2/2.md