CVE-2023-48194

published 2024-07-09

CVE-2023-48194: Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
tenda	ac8_firmware	—	—

CWE-787