CVE-2024-57577

CVSS 3.1 Score 5.7 of 10 (medium)

Details

Published Jan 16, 2025
Updated: Jan 17, 2025
CWE ID 120

Summary

CVE-2024-57577 is a newly identified vulnerability affecting the Tenda AC18 router running version V15.03.05.19. The vulnerability involves a stack overflow issue in the formSetSpeedWan function, which can be triggered through a maliciously crafted speed_dir parameter. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause the device to crash, potentially leading to a denial-of-service condition. Users of the affected device are advised to update to the latest firmware version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share