CVE-2023-40798: Tenda AC23 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.

Affected products

• Tenda AC23 Firmware: version 16.03.07.45_cn only

Published 2023-08-25. Last modified 2026-06-17.