CVE-2023-41558: Critical severity Tenda AC7 firmware vulnerability

Published Aug 30, 2023

Updated

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg.

Affected Software

2 affected components

Tenda AC7 firmware=15.03.06.44

Tenda AC7=1.0

Event History

Aug 30, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-41558?

CVE-2023-41558 is a vulnerability found in Tenda AC7 V1.0 V15.03.06.44 firmware, allowing a stack overflow through the 'timeZone' parameter in the '/goform/SetSysTimeCfg' URL.

How severe is CVE-2023-41558?

CVE-2023-41558 is classified as critical with a severity score of 9.8.

What software is affected by CVE-2023-41558?

Tenda AC7 V1.0 V15.03.06.44 firmware is affected by CVE-2023-41558.

How can I fix CVE-2023-41558?

Update your Tenda AC7 firmware to a version that has patched the vulnerability.

Where can I find more information about CVE-2023-41558?

You can find more information about CVE-2023-41558 at the following reference: [https://github.com/peris-navince/founded-0-days/blob/main/fromSetSysTime/1.md](https://github.com/peris-navince/founded-0-days/blob/main/fromSetSysTime/1.md)