CVE-2023-48194: Critical severity Tenda Ac8 Firmware vulnerability
Published Jul 9, 2024
·Updated
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing setclientqos, control over the gp register can be obtained.
Affected Software
2 affected components
All of the following
Tenda Ac8 Firmware=16.03.34.09
Tenda AC8V4
Event History
Jul 9, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-48194?
CVE-2023-48194 has a high severity rating due to its potential to allow attackers to gain control over the gp register.
2
How do I fix CVE-2023-48194?
To fix CVE-2023-48194, update your Tenda AC8v4 firmware to the latest version available.
3
Which devices are affected by CVE-2023-48194?
CVE-2023-48194 affects the Tenda AC8v4 firmware version 16.03.34.09.
4
What type of vulnerability is CVE-2023-48194?
CVE-2023-48194 is a memory corruption vulnerability that arises from improper handling of input in the sscanf function.
5
Can CVE-2023-48194 be exploited remotely?
Yes, CVE-2023-48194 can potentially be exploited remotely if the affected firmware is accessible.