CVE-2023-40797: Tenda AC23 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability.

Affected products

• Tenda AC23 Firmware: version 16.03.07.45_cn only

Published 2023-08-25. Last modified 2026-06-17.