CVE-2024-0990: falha de alta gravidade em Tenda i6
Tenda i6 httpd setAutoPing formSetAutoPing stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.7%
A vulnerability, which was classified as critical, was found in Tenda i6 1.0.0.9(3857). This affects the function formSetAutoPing of the file /goform/setAutoPing of the component httpd. The manipulation of the argument ping1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252255. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Tenda · i6CVEs relacionadas — Tenda i6
No mesmo produto, das mais perigosas para as menos.
CVE-2024-0993HIGHTenda i6 httpd WifiMacFilterGet formWifiMacFilterGet stack-based overflowEPSS 1.7%CVE-2024-0992HIGHTenda i6 httpd wifiSSIDset formwrlSSIDset stack-based overflowEPSS 1.7%CVE-2024-0991HIGHTenda i6 httpd setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2026-6024MEDIUMTenda i6 HTTP R7WebsSecurityHandlerfunction path traversalEPSS 0.7%