CVE-2023-40895: Critical severity Tenda Ac8v4 Firmware vulnerability
Published Aug 24, 2023
·Updated
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.
Affected Software
4 affected components
Tenda Ac8v4 Firmware=16.03.34.06
Tenda AC8V4
All of the following
Tenda Ac8 Firmware=16.03.34.06
Tenda AC8V4
Event History
Aug 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-40895.
2
What is the severity of CVE-2023-40895?
The severity of CVE-2023-40895 is critical with a severity value of 9.8.
3
What software versions are affected by CVE-2023-40895?
Tenda AC8 v4 firmware version 16.03.34.06 is affected by CVE-2023-40895.
4
How was CVE-2023-40895 discovered?
CVE-2023-40895 was discovered via a parameter list stack overflow at /goform/SetVirtualServerCfg.
5
Is Tenda AC8V4 vulnerable to CVE-2023-40895?
No, Tenda AC8V4 is not vulnerable to CVE-2023-40895.
6
How can I fix CVE-2023-40895?
To fix CVE-2023-40895, it is recommended to update to a patched version of Tenda AC8 v4 firmware.