CVE-2023-39672 — CRITICAL (9.8)

Vulnerability Description

Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Tenda	Wh450A Firmware	1.0.0.18
Tenda	Wh450A	-

Related Weaknesses (CWE)

CWE-120

References

https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/WH450%20buffer%20overflBroken Link
https://www.tendacn.com/download/list-3.htmlProduct
https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/WH450%20buffer%20overflBroken Link
https://www.tendacn.com/download/list-3.htmlProduct

FAQ

What is CVE-2023-39672?

CVE-2023-39672 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.

How severe is CVE-2023-39672?

CVE-2023-39672 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-39672?

Check the references section above for vendor advisories and patch information. Affected products include: Tenda Wh450A Firmware, Tenda Wh450A.