CVE-2023-40800: Tenda AC23 Firmware

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn.

Affected products

• Tenda AC23 Firmware: version 16.03.07.45_cn only

Published 2023-08-25. Last modified 2026-06-17.