CVE-2024-0923

Summary

CVE-2024-0923: A critical buffer overflow vulnerability (VDB-252128) has been identified in Tenda AC10U's formSetDeviceName function, version 15.03.06.49_multi_TDE01. The issue arises when the devName argument is manipulated, leading to a stack-based buffer overflow. This vulnerability is remotely exploitable, and the exploit has been disclosed to the public. Despite early notification, the vendor has not responded to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.