CVE-2023-48194

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p49

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jul 9, 2026

Description

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.

Vendors: tenda
Products: ac8 firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.