CVE-2023-47455: Critical severity tenda ax1806 firmware vulnerability
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-47455 vulnerability?
CVE-2023-47455 is a heap overflow vulnerability in the Tenda AX1806 V1.0.0.1 firmware, specifically in the setSchedWifi function.
How does the CVE-2023-47455 vulnerability occur?
The CVE-2023-47455 vulnerability occurs when the src and v12 parameters obtained from the HTTP request are not properly checked for their size, leading to a heap overflow.
What is the severity of CVE-2023-47455?
The severity of CVE-2023-47455 is critical, with a CVSS score of 9.1.
Which software versions are affected by CVE-2023-47455?
The Tenda AX1806 firmware version 1.0.0.1 is affected by CVE-2023-47455.
Is Tenda AX1806 vulnerable to CVE-2023-47455?
No, the Tenda AX1806 hardware itself is not vulnerable to CVE-2023-47455, only the firmware version 1.0.0.1.