Skip to main content

Ac10U Firmware CVE-2024-30612

HIGH
Stack-based Buffer Overflow (CWE-121)
2024-03-28 cve@mitre.org
8.1
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
8.1 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 28, 2024 - 15:15 cve.org
HIGH 8.1

DescriptionCVE.org

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.

AnalysisAI

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-121. Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function. Affected products include: Tenda Ac10U Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-2853 CRITICAL POC
9.8 Mar 24

A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. Rated critical severity (CVSS 9.8), this vulnerability

CVE-2024-0932 CRITICAL POC
9.8 Jan 26

A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical

CVE-2024-0931 CRITICAL POC
9.8 Jan 26

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical severity (CVSS 9

CVE-2024-0930 CRITICAL POC
9.8 Jan 26

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical severity (C

CVE-2024-0929 CRITICAL POC
9.8 Jan 26

A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical severity (CVSS 9.8), this vulnerability

CVE-2024-0928 CRITICAL POC
9.8 Jan 26

A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical severity (CVSS 9.8), this vulnerability

CVE-2024-0927 CRITICAL POC
9.8 Jan 26

A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical severity (CVSS 9.8), this vulnerability

CVE-2024-0926 CRITICAL POC
9.8 Jan 26

A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as critical. Rated critical severity (CV

CVE-2024-0925 CRITICAL POC
9.8 Jan 26

A vulnerability has been found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as critical. Rated critical severit

CVE-2024-0924 CRITICAL POC
9.8 Jan 26

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical seve

CVE-2024-0923 CRITICAL POC
9.8 Jan 26

A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical

CVE-2024-0922 CRITICAL POC
9.8 Jan 26

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. Rated critical severity (CVSS 9

Share

CVE-2024-30612 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy