CVE-2023-0782

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220640.

• CWE-787

• https://github.com/jingping911/tendaAC23overflow/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.220640Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220640Third Party Advisory
• https://github.com/jingping911/tendaAC23overflow/blob/main/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.220640Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220640Third Party Advisory

Published

Feb 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0776Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 L…10
• CVE-2023-0777Authentication Bypass by Primary Weakness in GitHub reposito…9.8
• CVE-2023-0778A Time-of-check Time-of-use (TOCTOU) flaw was found in podma…6.8
• CVE-2023-0779At the most basic level, an invalid pointer can be input tha…7.7
• CVE-2023-0780Improper Restriction of Rendered UI Layers or Frames in GitH…5.4
• CVE-2023-0781A vulnerability was found in SourceCodester Canteen Manageme…9.8
• CVE-2023-0783A vulnerability was found in EcShop 4.1.5. It has been class…9.8
• CVE-2023-0784A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-0785A vulnerability classified as problematic was found in Sourc…3.7
• CVE-2023-0786Cross-site Scripting (XSS) - Generic in GitHub repository th…4.8
• CVE-2023-0787Cross-site Scripting (XSS) - Generic in GitHub repository th…5.4
• CVE-2023-0788Code Injection in GitHub repository thorsten/phpmyfaq prior …9.8