A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function formSetPPTPServer. The manipulation of the argument startIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252129 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2024-01-26T14:31:04.491Z

Updated: 2024-08-01T18:18:18.983Z

Reserved: 2024-01-26T08:21:12.907Z

Link: CVE-2024-0924

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2024-01-26T15:15:08.537

Modified: 2024-11-21T08:47:45.600

Link: CVE-2024-0924

cve-icon Redhat

No data.