CVE-2024-0930

medium · 4.7

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252135. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

4.7

CVSS

15.2%

EPSS (exploit prob.)

97th

EPSS percentile

2024-01-26

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-121

Affected products

Vendor	Product	Affected versions
tendacn	ac10u_firmware	15.03.06.49_multi_tde01
tendacn	ac10u	1.0

Check a specific version with /api/v1/cve/match.

References

https://github.com/yaoyue123/iot/blob/main/Tenda/AC10U/fromSetWirelessRepeat.md
https://vuldb.com/?ctiid.252135
https://vuldb.com/?id.252135
https://github.com/yaoyue123/iot/blob/main/Tenda/AC10U/fromSetWirelessRepeat.md
https://vuldb.com/?ctiid.252135
https://vuldb.com/?id.252135

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-0930