Stack-based Buffer Overflow Vulnerability in Tenda RX9 and RX9 Pro
CVE-2024-10282

8.8HIGH

Key Information:

Vendor

Tenda
Status
Rx9 Pro Firmware
Vendor
CVE Published:
23 October 2024

What is CVE-2024-10282?

A vulnerability in Tenda RX9 and RX9 Pro router firmware versions 22.03.02.10 and 22.03.02.20 allows for a stack-based buffer overflow via the function sub_42EA38 in /goform/SetVirtualServerCfg. This vulnerability can be exploited remotely, leading to potential unauthorized access and execution of arbitrary code. The implications of this flaw are significant as it poses risks for sensitive data exposure and can destabilize network integrity. Public disclosure of the exploit has heightened concerns, emphasizing the need for immediate action to safeguard affected devices.

References

https://vuldb.com/?id.281557
https://vuldb.com/?ctiid.281557
https://vuldb.com/?submit.427066

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.