Tenda · Tenda Ac10 · CVE-2024-0931
**Name of the Vulnerable Software and Affected Versions**
Tenda AC10U version 15.03.06.49 multi TDE01
**Description**
The issue is related to a critical vulnerability affecting the `saveParentControlInfo` function, which is associated with a stack-based buffer overflow. This can be exploited remotely by manipulating the `deviceId`, `time`, or `urls` arguments, potentially impacting the confidentiality, integrity, and availability of protected information. The exploit has been disclosed publicly.
**Recommendations**
For Tenda AC10U version 15.03.06.49 multi TDE01, as a temporary workaround, consider disabling the `saveParentControlInfo` function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. Avoid using the `deviceId`, `time`, or `urls` arguments in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.