CVE-2024-0536: falha de alta gravidade em Tenda W9
Tenda W9 httpd setWrlAccessList stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 1.4%
A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is the function setWrlAccessList of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250706 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Tenda · W9CVEs relacionadas — Tenda W9
No mesmo produto, das mais perigosas para as menos.
CVE-2024-4240HIGHTenda W9 formQosManageDouble_user stack-based overflowEPSS 1.5%CVE-2024-0538HIGHTenda W9 httpd formQosManage_auto stack-based overflowEPSS 1.4%CVE-2024-4244HIGHTenda W9 DhcpSetSer fromDhcpSetSer stack-based overflowEPSS 1.3%CVE-2024-4243HIGHTenda W9 wifiSSIDset formwrlSSIDset stack-based overflowEPSS 1.3%CVE-2024-4242HIGHTenda W9 wifiSSIDget formwrlSSIDget stack-based overflowEPSS 1.3%CVE-2024-4241HIGHTenda W9 formQosManageDouble_auto stack-based overflowEPSS 1.3%