CVE-2024-0930

MEDIUM

Tenda AC10U 15.03.06.49_multi_TDE01 - Buffer Overflow

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252135. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.252135
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.252135

Scores

CVSS v3 4.7
EPSS 0.0734
EPSS Percentile 91.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-121
Status published
Products (1)
tendacn/ac10u_firmware 15.03.06.49_multi_tde01
Published Jan 26, 2024
Tracked Since Feb 18, 2026