PT-2024-20439 · Tenda · Tenda Ac9

Published 2024-02-05 · Updated 2024-02-14 · CVE-2024-24543

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 3.0, firmware version v.15.03.06.42 multi

Description The issue allows a remote attacker to cause a denial of service or run arbitrary code via crafted overflow data in the setSchedWifi function.

Recommendations For Tenda AC9 version 3.0, firmware version v.15.03.06.42 multi, consider disabling the setSchedWifi function until a patch is available to prevent potential exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2024-24543

Affected Products

Tenda Ac9

References · 4

• 🔥 https://github.com/TimeSeg/IOT_CVE/blob/main/tenda/AC9V3/0130/setSchedWifi.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-24543 · Security Note
• https://osv.dev/vulnerability/CVE-2024-24543 · Vendor Advisory
• https://twitter.com/CVEnew/status/1754609001973604849 · Twitter Post