PT-2024-35143 · Tenda · Tenda Ac6V2

Ba1100N · Published 2024-12-04 · Updated 2025-05-28 · CVE-2024-52273

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC6V2 versions through 15.03.06.50

Description The issue is a stack-based buffer overflow vulnerability in the setDoublePppoeConfig->guest ip check modules of Tenda AC6V2, where the mask argument can cause buffer overflows.

Recommendations For Tenda AC6V2 versions through 15.03.06.50, consider disabling the setDoublePppoeConfig function or restricting access to the guest ip check module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2024-52273

Affected Products

Tenda Ac6V2

References · 8

• 🔥 https://vulsec.org/advisories · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-52273 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52273 · Vendor Advisory
• https://t.me/cvenotify/102999 · Telegram Post
• https://twitter.com/CVEnew/status/1864258363468456416 · Twitter Post
• https://twitter.com/CveFindCom/status/1864257323138416665 · Twitter Post
• https://t.me/cvedetector/11970 · Telegram Post
• https://t.me/cvenotify/123858 · Telegram Post