critical9.8
CVE-2023-48194
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0.
Impact
Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac8 Firmware | Version 16.03.34.09 |