CVE-2023-48194

moderate-risk
Published 2024-07-09

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.

Do I need to act?

-
0.43% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Tenda

References (5)

Not Applicable http://tenda.com
Exploit https://github.com/zt20xx/CVE-2023-48194
https://www.tenda.com.cn/download/detail-3683.html
Not Applicable http://tenda.com
Exploit https://github.com/zt20xx/CVE-2023-48194
39
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 2/34 · Minimal
Exposure 5/34 · Minimal