CVE-2026-0640
CRITICAL SEVERITYCVSS Score & Metrics
Base Score
9.8 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Description
A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-119
Source
NVD
Vendor
tenda
Product
ac23_firmware
External References
- https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow/Tenda%20AC23_Buffer_Overflow.md
- https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC23_Buffer_Overflow/Tenda%20AC23_Buffer_Overflow.md#poc
- https://vuldb.com/?ctiid.339683
- https://vuldb.com/?id.339683
- https://vuldb.com/?submit.731772
- https://www.tenda.com.cn/
Discussion (0)
Add Comment
No comments yet. Be the first!