CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.81% chance of exploitation in the next 30 days, 54th percentile

Published

2024-04-17

Updated

2025-03-27

Proof-of-concept exploits (1)

• peris-navince/founded-0-days/blob/main/Tenda/ac500/fromSetVlanInfo/1.md

References

• CVE Record
• NVD entry

Related

• CVE-2023-43235
• CVE-2023-43236
• CVE-2023-43237
• CVE-2023-43238
• CVE-2023-43239
• CVE-2023-43240