CVE-2023-49044: Critical severity tenda ax1803 firmware vulnerability
Published Nov 27, 2023
·Updated
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function formfastsettingwifiset.
Affected Software
2 affected components
All of the following
Tenda Ax1803 Firmware=1.0.0.1
Tenda ax1803
Event History
Nov 27, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-49044?
CVE-2023-49044 is a stack overflow vulnerability in Tenda AX1803 v.1.0.0.1.
2
How does CVE-2023-49044 allow a remote attacker to execute arbitrary code?
CVE-2023-49044 allows a remote attacker to execute arbitrary code by exploiting the stack overflow vulnerability through the ssid parameter in the function form_fast_setting_wifi_set.
3
What software is affected by CVE-2023-49044?
Tenda AX1803 firmware v.1.0.0.1 is affected by CVE-2023-49044.
4
What is the severity of CVE-2023-49044?
CVE-2023-49044 has a severity level of critical (9.8).
5
How can CVE-2023-49044 be fixed?
To fix CVE-2023-49044, users should update their Tenda AX1803 firmware to a patched version provided by the vendor.