CVE-2024-11056
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 10, 2024
Updated: Nov 14, 2024
CWE ID 119
CWE ID 121
Summary
CVE-2024-11056 is a critical vulnerability impacting Tenda AC10 devices running firmware version 16.03.10.13. This issue lies in the FUN_0046AC38 function of the /goform/WifiExtraSet file. The vulnerability stems from a stack-based buffer overflow that can be triggered by manipulating the wpapsk_crypto argument. The exploitation of this vulnerability can be carried out remotely, and an exploit has already been disclosed to the public.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd