CVE-2023-40802

47th percentile - higher than 47% of all known CVEs

The get_parentControl_list_Info function does not verify the parameters entered by the user, leading to a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn.

Exploitation of this vulnerability could allow an attacker to execute remote code or destabilize the system, posing a serious security threat to the organization.

It is recommended to update the device firmware to the latest version that includes security patches and to verify user-entered parameters.