CVE-2024-2808

Summary

CVE-2024-2808 is a critical vulnerability affecting the Tenda AC15 model with firmware versions 15.03.05.18 and 15.03.20_multi. The issue lies in the function formQuickIndex of the /goform/QuickIndex file, where a stack-based buffer overflow can be triggered by manipulating the argument PPPOEPassword. This vulnerability is remotely exploitable and has been disclosed to the public, increasing the risk of attacks. The associated identifier for this vulnerability is VDB-257663. Unfortunately, the vendor did not respond to early disclosures regarding this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.