CVE-2024-2546

Summary

CVE-2024-2546 is a newly disclosed critical vulnerability affecting Tenda AC18 devices running firmware version 15.13.07.09. The issue lies in the fromSetWirelessRepeat function, where a stack-based buffer overflow can be triggered by manipulating the wpapsk_crypto5g argument. This vulnerability can be exploited remotely, and the exploit has been made public. The VDB identifier for this issue is VDB-256999. Regrettably, the vendor was contacted about this disclosure but did not respond or issue a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.