CVE-2024-2814

Summary

A critical vulnerability (CVE-2024-2814) has been discovered in Tenda AC15 15.03.20_multi, affecting the fromDhcpListClient function in the /goform/DhcpListClient file. This vulnerability allows for remote initiation of a stack-based buffer overflow through manipulation of the argument page. The exploit has been publicly disclosed and assigned the identifier VDB-257669, although the vendor did not respond to early contact about this disclosure. The vulnerability poses a high risk to organizations, with a base severity rating of HIGH and potential impacts on confidentiality and integrity. Remediation measures should be taken promptly to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.