CVE-2026-0640
Remote Buffer Overflow in Tenda AC23 sscanf Function
Publication date: 2026-01-06
Last updated on: 2026-01-06
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ac23 | 16.03.07.52 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a buffer overflow in the Tenda AC23 router version 16.03.07.52, specifically in the sscanf function within the /goform/PowerSaveSet file. It occurs when the 'Time' argument is manipulated in a way that causes the input buffer to overflow due to improper boundary checks. This flaw allows an attacker to remotely send a specially crafted request that can corrupt memory, potentially leading to denial of service or remote code execution on the device. [2, 3]
How can this vulnerability impact me? :
The vulnerability can impact you by allowing remote attackers to cause denial of service (DoS) or execute arbitrary code on the affected Tenda AC23 router. This compromises the confidentiality, integrity, and availability of the device, potentially allowing attackers to take control of the router or disrupt its normal operation. [2, 3]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for specially crafted HTTP POST requests sent to the /goform/PowerSaveSet endpoint of the Tenda AC23 router version 16.03.07.52. Detection involves inspecting network traffic for unusual or malformed POST requests targeting this endpoint, especially those manipulating the 'Time' argument. Specific commands are not provided in the resources, but network packet capture tools like tcpdump or Wireshark can be used to filter HTTP POST requests to /goform/PowerSaveSet for further analysis. [2, 3]
What immediate steps should I take to mitigate this vulnerability?
No known countermeasures or mitigations currently exist for this vulnerability. The suggested immediate step is to replace the affected product, the Tenda AC23 router version 16.03.07.52, to avoid exploitation. Additionally, monitoring for exploit attempts and restricting network access to the device may help reduce risk until replacement. [3]