PT-2024-9134 · Tenda · Tenda Ac9+8

Minipython

·

Published

2024-10-23

·

Updated

2024-11-01

·

CVE-2024-10280

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500, and AC1206 versions up to 20241022
Description: A vulnerability was found in the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. This issue may allow an attacker to execute arbitrary code. The exploit has been disclosed to the public and may be used.
Recommendations: For Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500, and AC1206 versions up to 20241022: As a temporary workaround, consider disabling the websReadEvent function until a patch is available. Restrict access to the /goform/GetIPTV file to minimize the risk of exploitation. Avoid using the Content-Length argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-10821
CVE-2024-10280

Affected Products

Tenda Ac10
Tenda Ac1206
Tenda Ac15
Tenda Ac18
Tenda Ac500
Tenda Ac6
Tenda Ac7
Tenda Ac8
Tenda Ac9