CVE-2024-10697

Summary

CVE-2024-10697 is a critical vulnerability affecting Tenda AC6 devices running firmware version 15.03.05.19. The issue lies within the function formWriteFacMac of the API Endpoint's /goform/WriteFacMac component. By manipulating the argument The, an attacker can inject commands, leading to potential security compromises. The vulnerability is remote, meaning it can be exploited without requiring physical access to the affected device. The exploit for this vulnerability has been publicly disclosed, increasing the risk for potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.