CVE-2023-27017: Critical severity tenda ac10v4 vulnerability
Published Apr 7, 2023
·Updated
Tenda AC10 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the sub45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
Affected Software
2 affected components
Tenda Ac10 Firmware=16.03.10.13_cn
Tenda AC10=4.0
Event History
Apr 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-27017?
CVE-2023-27017 is a vulnerability in Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn firmware that allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
2
How severe is CVE-2023-27017?
CVE-2023-27017 is considered critical with a severity rating of 9.8 out of 10.
3
What software versions are affected by CVE-2023-27017?
Versions of Tenda AC10 firmware prior to 16.03.10.13_cn are affected by CVE-2023-27017.
4
How can CVE-2023-27017 be exploited?
CVE-2023-27017 can be exploited by attackers through a stack overflow in the sub_45DC58 function.
5
Is Tenda AC10 version 4.0 vulnerable to CVE-2023-27017?
No, Tenda AC10 version 4.0 is not vulnerable to CVE-2023-27017.