critical9.1
CVE-2023-47455
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request paramet…
Impact
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ax1806 Firmware | Version 1.0.0.1 |