CVE-2023-38931

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/cloudv2_setaccount/README.md	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:tenda:ac10_firmware:15.03.06.23:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac10:1.0:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac1206:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:tenda:ac6_firmware:15.03.06.23:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac6:2.0:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:tenda:ac7_firmware:15.03.06.44:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac7:1.0:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:tenda:f1203_firmware:2.0.1.6:*:*:*:*:*:*:*

cpe:2.3:h:tenda:f1203:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:tenda:ac10_firmware:16.03.10.13:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:tenda:fh1203_firmware:2.0.1.6:*:*:*:*:*:*:*

cpe:2.3:h:tenda:fh1203:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-08-07 19:15

Updated : 2023-08-10 17:17

NVD link : CVE-2023-38931

Mitre link : CVE-2023-38931

CVE.ORG link : CVE-2023-38931

JSON object : View

Products Affected

tenda

ac8_firmware
ac7_firmware
ac5
fh1203_firmware
ac7
ac1206
fh1203
ac6
f1203_firmware
ac1206_firmware
ac5_firmware
ac10
ac8
ac10_firmware
f1203
ac6_firmware

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2023-38931", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-08-07T19:15:10.977", "references": [{"url": "https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/cloudv2_setaccount/README.md", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function."}], "lastModified": "2023-08-10T17:17:05.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac10_firmware:15.03.06.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66ED84F0-B0EB-4F55-9AD6-C8B682BAB472"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac10:1.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AF790B76-6CAD-483A-95FA-80955643825B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "787A50A1-EDBC-44EB-8CF2-11C4FC63719D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac1206:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "29D5013D-520A-461A-95FF-43B2BE160F91"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac8_firmware:16.03.34.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C1D64DC-1EDC-4F62-8D22-E1890B71843C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac8:4.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "655619B2-6E8B-4D2E-98E7-028E69597E80"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac6_firmware:15.03.06.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D82FD30C-AF3C-4E3B-B674-002A5C9ED09D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac6:2.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E382AD7E-1450-40FC-AE9D-698B491805F0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac7_firmware:15.03.06.44:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D94B37C-491D-4E7C-8273-F46FEDA62C9F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac7:1.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "96503617-6B69-4862-ADFE-4EF379876F0F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:f1203_firmware:2.0.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B3530E4-70D6-4246-84CA-E25797329DE0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:f1203:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FB77DC8-C11D-418A-AB87-5FE0226CA6CA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac5_firmware:15.03.06.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F928648-C8B2-4D37-8343-C74AABEFAB07"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac5:1.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D141716B-56F0-4061-9D87-943B7858F2F4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:ac10_firmware:16.03.10.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F1C8715-D7B4-4D1A-9E90-079C72049332"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "970AEBF4-2B32-4633-A75B-2D2C598C048D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tenda:fh1203_firmware:2.0.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E28AF51D-EBFB-4EC8-9FCB-C3DFAE1DBB2E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tenda:fh1203:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E7A0DCB-AC18-4F32-86E2-F2C2E9118A71"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}