ID
VAR-202309-0136
CVE
CVE-2023-4744
TITLE
Shenzhen Tenda Technology Co.,Ltd. of AC8 Out-of-bounds write vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability. of AC8 An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The Tenda AC8 is a dual-gigabit wireless router designed for homes with fiber optic connections up to 1000 Mbps. It supports IPv6 and features intelligent network management. The Tenda AC8 suffers from a stack buffer overflow vulnerability caused by a bounds error in the formSetDeviceName function when processing untrusted input. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service
Trust: 2.25
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ac8 | scope: | eq | version: | 16.03.34.06 | Trust: 1.0 |
| vendor: | tenda | model: | ac8 | scope: | eq | version: | ac8 firmware 16.03.34.06 | Trust: 0.8 |
| vendor: | tenda | model: | ac8 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | ac8 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | ac8 16.03.34.06 cn tdc01 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2023-4744 | Trust: 3.3 |
| db: | VULDB | id: | 238633 | Trust: 1.9 |
| db: | JVNDB | id: | JVNDB-2023-011507 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-24490 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2023-4744 | Trust: 0.1 |
REFERENCES
| url: | https://vuldb.com/?ctiid.238633 | Trust: 1.9 |
| url: | https://github.com/gleamingeyes/vul/blob/main/tenda_ac8/ac8_1.md | Trust: 1.9 |
| url: | https://vuldb.com/?id.238633 | Trust: 1.9 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2023-4744 | Trust: 1.4 |
| url: | https://cwe.mitre.org/data/definitions/121.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | CNVD | id: | CNVD-2025-24490 |
| db: | VULMON | id: | CVE-2023-4744 |
| db: | JVNDB | id: | JVNDB-2023-011507 |
| db: | NVD | id: | CVE-2023-4744 |
LAST UPDATE DATE
2025-11-19T23:23:01.007000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-24490 | date: | 2025-10-22T00:00:00 |
| db: | VULMON | id: | CVE-2023-4744 | date: | 2023-09-04T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-011507 | date: | 2023-12-13T07:13:00 |
| db: | NVD | id: | CVE-2023-4744 | date: | 2024-05-17T02:31:45.953 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-24490 | date: | 2025-10-22T00:00:00 |
| db: | VULMON | id: | CVE-2023-4744 | date: | 2023-09-04T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-011507 | date: | 2023-12-13T00:00:00 |
| db: | NVD | id: | CVE-2023-4744 | date: | 2023-09-04T00:15:07.463 |