Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2023-47455

Description

Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.

POC

Reference

- https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1806/setSchedWifi.md

Github

No PoCs found on GitHub currently.