CVE-2023-4744: critical vulnerability in Tenda AC8
Tenda AC8 formSetDeviceName stack-based overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 1.8%
A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Tenda · AC8public PoCs found — 1
cve_referencegithub.com/GleamingEyes/vul/blob/main/tenda_ac8/ac8_1.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Tenda AC8
In the same product, most dangerous first.
CVE-2026-4253MEDIUMTenda AC8 Web UploadCfg route_set_user_policy_rule os command injectionEPSS 8.1%CVE-2025-0528HIGHTenda AC8/AC10/AC18 HTTP Request telnet command injectionEPSS 6.2%CVE-2025-12618HIGHTenda AC8 DatabaseIniSet buffer overflowEPSS 5.4%CVE-2025-11120HIGHTenda AC8 SetServerConfig formSetServerConfig buffer overflowEPSS 4.0%CVE-2024-4066HIGHTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflowEPSS 1.8%CVE-2024-4064HIGHTenda AC8 execCommand R7WebsSecurityHandler stack-based overflowEPSS 1.8%