PT-2024-22457 · Tenda · Tenda Ac18

Published 2024-03-26 · Updated 2024-08-05 · CVE-2024-28551

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05

Description The issue is related to a stack overflow vulnerability in the ssid parameter of the form fast setting wifi set function. This vulnerability can be exploited, potentially allowing unauthorized access or control.

Recommendations For Tenda AC18 version 15.03.05.05, as a temporary workaround, consider restricting the use of the ssid parameter in the form fast setting wifi set function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-28551

Affected Products

Tenda Ac18

References · 5

• 🔥 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/form_fast_setting_wifi_set.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-28551 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28551 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1772758030683140112 · Twitter Post
• https://twitter.com/CVEnew/status/1772728582718329192 · Twitter Post