CVE-2023-41561

published 2023-08-30

CVE-2023-41561: Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter startIp and endIp at url /goform/SetPptpServerCfg.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
tenda	ac5_firmware	—	—
tenda	ac9_firmware	—	—

CWE-787