CVE-2024-11650
CVSS 2.0 Score 6.8 of 10 (medium)
Details
Published Nov 25, 2024
CWE ID 404
CWE ID 476
Summary
CVE-2024-11650 is a critical vulnerability affecting the Tenda i9 firmware version 1.0.0.8(3828). The issue lies within the websReadEvent function in the /goform/GetIPTV file, leading to null pointer dereference. This vulnerability can be exploited remotely, allowing attackers to launch manipulative attacks. The exploit for this vulnerability has been disclosed to the public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share