deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-38422
Published: 2023-08-23
Description: Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data.

CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-229-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-229-04
CVE: CVE-2023-3453
Published: 2023-08-23
Description: 
ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.


CVSS Score: 7.1 (HIGH)
CWE: CWE-1188
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01
CVE: CVE-2023-41028
Published: 2023-08-23
Description: A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.


CVSS Score: 9.0 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://blog.exodusintel.com/2023/08/23/juplink-rx4-1500-stack-based-buffer-overflow-vulnerability/; https://blog.exodusintel.com/2023/08/23/juplink-rx4-1500-stack-based-buffer-overflow-vulnerability/
CVE: CVE-2023-32559
Published: 2023-08-24
Description: A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the policy mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')` run arbitrary code, outside of the limits defined in a `policy.json` file. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://hackerone.com/reports/1946470; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://hackerone.com/reports/1946470
CVE: CVE-2023-40572
Published: 2023-08-24
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus compromising the confidentiality, integrity and availability of the whole XWiki installation. When a user with script right views this image and a log message `ERROR foo - Script executed!` appears in the log, the XWiki installation is vulnerable. This has been patched in XWiki 14.10.9 and 15.4RC1 by requiring a CSRF token for the actual page creation.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-352
References: https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4f8m-7h83-9f6m; https://jira.xwiki.org/browse/XWIKI-20849
CVE: CVE-2023-40573
Published: 2023-08-24
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain Groovy scripts. Currently, the job checks the content author of the job for programming right. However, modifying or adding a job script to a document doesn't modify the content author. Together with a CSRF vulnerability in the job scheduler, this can be exploited for remote code execution by an attacker with edit right on the wiki. If the attack is successful, an error log entry with "Job content executed" will be produced. This vulnerability has been patched in XWiki 14.10.9 and 15.4RC1.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-284
References: https://github.com/xwiki/xwiki-platform/commit/fcdcfed3fe2e8a3cad66ae0610795a2d58ab9662; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8xhr-x3v8-rghj; https://jira.xwiki.org/browse/XWIKI-20852
CVE: CVE-2023-4227
Published: 2023-08-24
Description: A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-489, CWE-863
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability; https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability
CVE: CVE-2023-3704
Published: 2023-08-24
Description: The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.

Successful exploitation of this vulnerability could allow the remote attacker to change system time of the targeted device.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0240; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0240
CVE: CVE-2023-4228
Published: 2023-08-24
Description: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.


CVSS Score: 3.1 (LOW)
CWE: CWE-1004, CWE-732
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability; https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability
CVE: CVE-2023-4229
Published: 2023-08-24
Description: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability; https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability
CVE: CVE-2023-4230
Published: 2023-08-24
Description: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which has the potential to facilitate the collection of information on ioLogik 4000 Series devices. This vulnerability may enable attackers to gather information for the purpose of assessing vulnerabilities and potential attack vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability; https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability
CVE: CVE-2023-4511
Published: 2023-08-24
Description: BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://gitlab.com/wireshark/wireshark/-/issues/19258; https://www.wireshark.org/security/wnpa-sec-2023-24.html; https://gitlab.com/wireshark/wireshark/-/issues/19258
CVE: CVE-2023-4512
Published: 2023-08-24
Description: CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-674, CWE-674
References: https://gitlab.com/wireshark/wireshark/-/issues/19144; https://www.wireshark.org/security/wnpa-sec-2023-23.html; https://gitlab.com/wireshark/wireshark/-/issues/19144
CVE: CVE-2023-4513
Published: 2023-08-24
Description: BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://gitlab.com/wireshark/wireshark/-/issues/19259; https://www.wireshark.org/security/wnpa-sec-2023-25.html; https://gitlab.com/wireshark/wireshark/-/issues/19259
CVE: CVE-2023-3705
Published: 2023-08-24
Description: The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device.

Successful exploitation of this vulnerability could allow the remote attacker to obtain sensitive information on the targeted device.

CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-20
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0239; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0239
CVE: CVE-2023-38288
Published: 2023-08-24
Description: Rejected reason: Not a Security Issue.
CVE: CVE-2023-38289
Published: 2023-08-24
Description: Rejected reason: Not a Security Issue.
CVE: CVE-2023-32510
Published: 2023-08-24
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rolf van Gelder Order Your Posts Manually plugin <= 2.2.5 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/order-your-posts-manually/wordpress-order-your-posts-manually-plugin-2-2-5-reflected-cross-site-scripting-xss-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/order-your-posts-manually/wordpress-order-your-posts-manually-plugin-2-2-5-reflected-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE: CVE-2023-32511
Published: 2023-08-24
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-plugin-1-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-plugin-1-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32516
Published: 2023-08-24
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.3.6 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/menu-ordering-reservations/wordpress-restaurant-menu-food-ordering-system-table-reservation-plugin-2-3-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/menu-ordering-reservations/wordpress-restaurant-menu-food-ordering-system-table-reservation-plugin-2-3-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-34040
Published: 2023-08-24
Description: In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers.

Specifically, an application is vulnerable when all of the following are true:

  *  The user does not configure an ErrorHandlingDeserializer for the key and/or value of the record
  *  The user explicitly sets container properties checkDeserExWhenKeyNull and/or checkDeserExWhenValueNull container properties to true.
  *  The user allows untrusted sources to publish to a Kafka topic


By default, these properties are false, and the container only attempts to deserialize the headers if an ErrorHandlingDeserializer is configured. The ErrorHandlingDeserializer prevents the vulnerability by removing any such malicious headers before processing the record.



CVSS Score: 5.3 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://spring.io/security/cve-2023-34040; https://spring.io/security/cve-2023-34040
CVE: CVE-2023-40371
Published: 2023-08-24
Description: IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls.  IBM X-Force ID:  263476.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/263476; https://www.ibm.com/support/pages/node/7028420; https://exchange.xforce.ibmcloud.com/vulnerabilities/263476
CVE: CVE-2023-40874
Published: 2023-08-24
Description: DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss1.md; https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss1.md
CVE: CVE-2023-40875
Published: 2023-08-24
Description: DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss2.md; https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss2.md
CVE: CVE-2023-40876
Published: 2023-08-24
Description: DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss3.md; https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss3.md
CVE: CVE-2023-40877
Published: 2023-08-24
Description: DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_edit.php via the title parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss4.md; https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss4.md
CVE: CVE-2022-46884
Published: 2023-08-24
Description: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time.  This could have lead to memory corruption or a potentially exploitable crash.
*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1786818; https://www.mozilla.org/security/advisories/mfsa2022-44/; https://bugzilla.mozilla.org/show_bug.cgi?id=1786818
CVE: CVE-2023-34971
Published: 2023-08-24
Description: An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2425 build 20230609 and later
QTS 5.1.0.2444 build 20230629 and later
QTS 4.5.4.2467 build 20230718 and later
QuTS hero h5.1.0.2424 build 20230609 and later
QuTS hero h4.5.4.2476 build 20230728 and later

CVSS Score: 7.1 (HIGH)
CWE: CWE-326, CWE-326
References: https://www.qnap.com/en/security-advisory/qsa-23-60; https://www.qnap.com/en/security-advisory/qsa-23-60
CVE: CVE-2023-34972
Published: 2023-08-24
Description: A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2425 build 20230609 and later
QTS 5.1.0.2444 build 20230629 and later
QuTS hero h5.1.0.2424 build 20230609 and later

CVSS Score: 3.5 (LOW)
CWE: CWE-319, CWE-319
References: https://www.qnap.com/en/security-advisory/qsa-23-58; https://www.qnap.com/en/security-advisory/qsa-23-58
CVE: CVE-2023-34973
Published: 2023-08-24
Description: An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2425 build 20230609 and later
QTS 5.1.0.2444 build 20230629 and later
QuTS hero h5.1.0.2424 build 20230609 and later

CVSS Score: 3.1 (LOW)
CWE: CWE-331, CWE-331
References: https://www.qnap.com/en/security-advisory/qsa-23-59; https://www.qnap.com/en/security-advisory/qsa-23-59
CVE: CVE-2023-40706
Published: 2023-08-24
Description: There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login.
CVSS Score: 8.6 (HIGH)
CWE: CWE-307, CWE-307
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02; https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02
CVE: CVE-2023-40707
Published: 2023-08-24
Description: There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.
CVSS Score: 8.6 (HIGH)
CWE: CWE-521, CWE-521
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02; https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02
CVE: CVE-2023-40708
Published: 2023-08-24
Description: The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-1188
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02; https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02
CVE: CVE-2023-40709
Published: 2023-08-24
Description: An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-770, CWE-400
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02; https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02
CVE: CVE-2023-40710
Published: 2023-08-24
Description: An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-770, CWE-400
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02; https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02
CVE: CVE-2023-39834
Published: 2023-08-24
Description: PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Pbootcms/Pbootcms/issues/8; https://github.com/Pbootcms/Pbootcms/issues/8
CVE: CVE-2023-40891
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetFirewallCfg/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetFirewallCfg/1.md
CVE: CVE-2023-40892
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/setSchedEWifi/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/setSchedEWifi/1.md
CVE: CVE-2023-40893
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/setSmartPowerManagement/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/setSmartPowerManagement/1.md
CVE: CVE-2023-40894
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/fromSetStaticRouteCfg/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/fromSetStaticRouteCfg/1.md
CVE: CVE-2023-40895
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetVirtualSer/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetVirtualSer/1.md
CVE: CVE-2023-40896
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/SetIpMacBind/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/SetIpMacBind/1.md
CVE: CVE-2023-40897
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/GetParentControlInfo/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/GetParentControlInfo/1.md
CVE: CVE-2023-40898
Published: 2023-08-24
Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/peris-navince/founded-0-days/blob/main/ac8/SetSysTimeCfg/1.md; https://github.com/peris-navince/founded-0-days/blob/main/ac8/SetSysTimeCfg/1.md