CVE-2023-41553: Critical severity tenda ac9 vulnerability

Published Aug 30, 2023

Updated

Tenda AC9 V3.0 V15.03.06.42multi and Tenda AC5 USAC5V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetStaticRouteCfg.

Affected Software

4 affected components

Tenda Ac9 Firmware=5.03.06.42_multi

Tenda Ac9=3.0

Tenda Ac5 Firmware=15.03.06.28

Tenda AC5=1.0

Event History

Aug 30, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-41553?

The severity of CVE-2023-41553 is critical with a score of 9.8 out of 10.

Which Tenda devices are affected by CVE-2023-41553?

Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 are affected by CVE-2023-41553.

How does CVE-2023-41553 manifest?

CVE-2023-41553 manifests as a stack overflow via parameter list at the URL /goform/SetStaticRouteCfg.

Is Tenda AC9 V3.0 vulnerable to CVE-2023-41553?

No, Tenda AC9 V3.0 is not vulnerable to CVE-2023-41553.

Is Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 vulnerable to CVE-2023-41553?

No, Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 is not vulnerable to CVE-2023-41553.

How can I fix CVE-2023-41553?

To fix CVE-2023-41553, update your Tenda AC9 V3.0 firmware to version 5.03.06.42_multi or later, or update your Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 firmware to version 15.03.06.28 or later.