A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269948. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
History

Fri, 30 Aug 2024 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Tendacn
Tendacn a301
Tendacn a301 Firmware
Weaknesses CWE-787
CPEs cpe:2.3:h:tendacn:a301:2.0:*:*:*:*:*:*:*
cpe:2.3:o:tendacn:a301_firmware:15.13.08.12:*:*:*:*:*:*:*
Vendors & Products Tendacn
Tendacn a301
Tendacn a301 Firmware

cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2024-06-28T17:00:07.083Z

Updated: 2024-08-01T21:41:03.307Z

Reserved: 2024-06-28T12:14:41.333Z

Link: CVE-2024-6403

cve-icon Vulnrichment

Updated: 2024-08-01T21:41:03.307Z

cve-icon NVD

Status : Modified

Published: 2024-06-28T17:15:04.140

Modified: 2024-11-21T09:49:35.110

Link: CVE-2024-6403

cve-icon Redhat

No data.