CVE-2024-2710

Summary

CVE-2024-2710 is a critical buffer overflow vulnerability affecting the Tenda AC15.03.06.49 firmware. The issue lies within the setSchedWifi function of the /goform/openSchedWifi file. Manipulation of the schedStartTime argument results in a stack-based buffer overflow, allowing remote attackers to launch exploits. The vulnerability, identified as VDB-257461, has been publicly disclosed, and the exploit code is available. Despite early notification, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.