CVE-2023-40800: Input Validation
First published: Fri Aug 25 2023(Updated: )
The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tenda Ac23 Firmware | =16.03.07.45_cn | |
| Tenda AC23 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-40800.
What is the severity of CVE-2023-40800?
CVE-2023-40800 has a severity rating of 8.8 (high).
How does CVE-2023-40800 affect Tenda AC23 v16.03.07.45_cn?
CVE-2023-40800 affects Tenda AC23 v16.03.07.45_cn by causing a post-authentication stack overflow vulnerability in the compare_parentcontrol_time function.
Is Tenda AC23 v16.03.07.45_cn vulnerable to CVE-2023-40800?
Yes, Tenda AC23 v16.03.07.45_cn is vulnerable to CVE-2023-40800.
How can I fix CVE-2023-40800?
To fix CVE-2023-40800, it is recommended to update to a patched version of Tenda AC23 firmware.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/tenda
- canonical/tenda ac23 firmware
- version/tenda ac23 firmware/16.03.07.45_cn
- canonical/tenda ac23