CVE-2024-11061

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 11, 2024
Updated: Nov 13, 2024
CWE ID 119
CWE ID 121

Summary

CVE-2024-11061 is a critical vulnerability affecting Tenda AC10 devices running firmware version 16.03.10.13. The issue lies within the FUN_0044db3c function of the /goform/fast_setting_wifi_set file. An attacker can exploit this stack-based buffer overflow by manipulating the timeZone argument in a remote request. Public disclosure of the exploit increases the risk of attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share