CVE-2024-2487 in AC18info

Zusammenfassung

von MITRE • 15.03.2024

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256894 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Zuständig

VulDB

Reservieren

15.03.2024

Veröffentlichung

15.03.2024

Moderieren

akzeptiert

Eintrag

VDB-256894

CPE

bereit

Exploit

Download

EPSS

0.01648

KEV

nein

Aktivitäten

very low

Quellen

Do you know our Splunk app?

Download it now for free!