Tendacn AC23 AC2100 Firmware vulnerabilities

4 CVEs affecting Tendacn AC23 AC2100 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-32386, published 2022-07-06.

More from Tendacn.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-32386, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 10.2% chance of exploitation in the next 30 days. Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
• CVE-2022-32385, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
• CVE-2022-32383, published 2022-07-06. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.
• CVE-2022-32384, published 2022-07-01. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.