CVE-2024-2808
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2024-2808 is a critical vulnerability found in Tenda AC15 15.03.05.18/15.03.20_multi. The vulnerability affects the function formQuickIndex of the file /goform/QuickIndex and can result in a stack-based buffer overflow when manipulating the argument PPPOEPassword. The exploit can be initiated remotely, posing a potential danger to organizations using the affected products. It is important to note that the vendor was notified but did not respond to this disclosure. The associated vulnerability identifier is VDB-257663, and the CVSS score is 9.0, indicating a high severity level with significant impacts on confidentiality, integrity, and availability of the system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions