CVE-2024-0542

Summary

CVE-2024-0542 is a critical vulnerability affecting the Tenda W9 1.0.0.7(4456) firmware. The issue lies within the httpd component's formWifiMacFilterGet function, where a buffer overflow occurs due to the manipulation of an argument index. This vulnerability can be exploited remotely, leading to potential code injection and unauthorized access. The exploit for this vulnerability, identified as VDB-250712, has been disclosed to the public. Despite early contact, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.