CVE-2024-0993: falha de alta gravidade em Tenda i6
Tenda i6 httpd WifiMacFilterGet formWifiMacFilterGet stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.7%
A vulnerability was found in Tenda i6 1.0.0.9(3857). It has been classified as critical. Affected is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-252258 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Tenda · i6CVEs relacionadas — Tenda i6
No mesmo produto, das mais perigosas para as menos.
CVE-2024-0992HIGHTenda i6 httpd wifiSSIDset formwrlSSIDset stack-based overflowEPSS 1.7%CVE-2024-0991HIGHTenda i6 httpd setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-0990HIGHTenda i6 httpd setAutoPing formSetAutoPing stack-based overflowEPSS 1.7%CVE-2026-6024MEDIUMTenda i6 HTTP R7WebsSecurityHandlerfunction path traversalEPSS 0.7%