CVE-2023-41556

CRITICAL

Tenda AC9 AC7 AC5 Firmware - Stack Overflow via SetIpMacBind Parameter List

Title source: llm

Description

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /goform/SetIpMacBind.

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://github.com/peris-navince/founded-0-days/blob/main/fromSetIpMacBind/1.md

Scores

CVSS v3 9.8

EPSS 0.0017

EPSS Percentile 38.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-787

Status published

Products (3)

tenda/ac5_firmware 15.03.06.28

tenda/ac7_firmware 15.03.06.44

tenda/ac9_firmware 5.03.06.42_multi

Published Aug 30, 2023

Tracked Since Feb 18, 2026