CVE-2024-0930
MEDIUMTenda AC10U 15.03.06.49_multi_TDE01 - Buffer Overflow
Title source: llmDescription
A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252135. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References (3)
Scores
CVSS v3
4.7
EPSS
0.0734
EPSS Percentile
91.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-121
Status
published
Affected Products (1)
tendacn/ac10u_firmware
Timeline
Published
Jan 26, 2024
Tracked Since
Feb 18, 2026