CVE-2023-34568: Medium severity Tenda Ac10 Firmware vulnerability

Published Jun 8, 2023

Updated

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.

Affected Software

4 affected components

All of the following

Tenda Ac10 Firmware=us_ac10v4.0si_v16.03.10.13_cn

Tenda AC10=4.0

Tenda Ac10 Firmware=us_ac10v4.0si_v16.03.10.13_cn

Tenda AC10=4.0

Event History

Jun 8, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-34568?

CVE-2023-34568 is a vulnerability found in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn firmware that allows for a stack overflow via the 'time' parameter in the /goform/PowerSaveSet path.

How severe is CVE-2023-34568?

CVE-2023-34568 has a severity rating of medium with a CVSS score of 6.7.

What software versions are affected by CVE-2023-34568?

The Tenda AC10 v4 firmware version US_AC10V4.0si_V16.03.10.13_cn is affected by CVE-2023-34568.

How can I fix CVE-2023-34568?

Unfortunately, there is no known fix or patch available for CVE-2023-34568 at the moment. It is recommended to follow the vendor's security advisories for any updates.

Where can I find more information about CVE-2023-34568?

You can find more information about CVE-2023-34568 at the following link: https://hackmd.io/@0dayResearch/ryR8IzMH2