CVE-2024-0542

HIGH

Tenda W9 1.0.0.7(4456) - Stack-based Buffer Overflow in formWifiMacFilterGet

Title source: llm
STIX 2.1

Description

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250712. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.250712
Permissions Required, Third Party Advisory, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.250712
Broken Link, Third Party Advisory broken-link exploit
https://github.com/jylsec/vuldb/blob/main/Tenda/W9/7/README.md

Scores

CVSS v3 8.8
EPSS 0.0014
EPSS Percentile 32.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-121 CWE-787
Status published
Products (1)
tenda/w9_firmware 1.0.0.7\(4456\)
Published Jan 15, 2024
Tracked Since Feb 18, 2026