CVE-2023-40837

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-30 · updated 2026-06-17
Weakness: CWE-78

Description

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands.

Affected products

Tenda AC6: 15.03.05.16

References

https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/2/2.md
https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/2/2.md

Get alerted when CVE-2023-40837 or the next vulnerability affects your stack