A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257455. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Affected Vendors & Products
References
History
Thu, 12 Dec 2024 17:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Tenda
Tenda ac10u Tenda ac10u Firmware |
|
Weaknesses | CWE-787 | |
CPEs | cpe:2.3:h:tenda:ac10u:-:*:*:*:*:*:*:* cpe:2.3:o:tenda:ac10u_firmware:15.03.06.49:*:*:*:*:*:*:* |
|
Vendors & Products |
Tenda
Tenda ac10u Tenda ac10u Firmware |
MITRE
Status: PUBLISHED
Assigner: VulDB
Published: 2024-03-20T16:00:07.684Z
Updated: 2024-08-12T18:06:34.407Z
Reserved: 2024-03-20T09:49:39.887Z
Link: CVE-2024-2704
Vulnrichment
Updated: 2024-08-01T19:18:48.302Z
NVD
Status : Analyzed
Published: 2024-03-20T16:15:08.640
Modified: 2024-12-12T17:27:11.390
Link: CVE-2024-2704
Redhat
No data.