CVE-2024-4243

A vulnerability classified as critical has been found in Tenda W9 1.0.0.7(4456). Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-262134 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Configurations

No configuration.

History

21 Nov 2024, 09:42

Type Values Removed Values Added
References () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W9/formwrlSSIDset.md - () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/W9/formwrlSSIDset.md -
References () https://vuldb.com/?ctiid.262134 - () https://vuldb.com/?ctiid.262134 -
References () https://vuldb.com/?id.262134 - () https://vuldb.com/?id.262134 -
References () https://vuldb.com/?submit.319825 - () https://vuldb.com/?submit.319825 -

14 May 2024, 15:43

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad ha sido encontrada en Tenda W9 1.0.0.7(4456) y clasificada como crítica. La función formwrlSSIDset del fichero /goform/wifiSSIDset es afectada por la vulnerabilidad. La manipulación del argumento ssidIndex provoca un desbordamiento de búfer en la región stack de la memoria. Es posible lanzar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. VDB-262134 es el identificador asignado a esta vulnerabilidad. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.

26 Apr 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-26 22:15

Updated : 2024-11-21 09:42


NVD link : CVE-2024-4243

Mitre link : CVE-2024-4243

CVE.ORG link : CVE-2024-4243


JSON object : View

Products Affected

No product.

CWE
CWE-121

Stack-based Buffer Overflow