Security Advisory

CVE-2023-40798

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-25 00:00:00
Last updated 2024-10-02 17:45:18
Assigner mitre
State PUBLISHED

Description

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.