CVE-2024-2894 in AC7information

Résumé

par MITRE • 26/03/2024

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. This affects the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257937 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

VulDB

Réserver

26/03/2024

Divulgation

26/03/2024

Modérer

accepté

Entrée

VDB-257937

CPE

prêt

Exploitation

Télécharger

EPSS

0.01584

KEV

non

Activités

très faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!