Stack-Based Buffer Overflow Vulnerability in Tenda AC1206 Router

CVE-2024-10434

Summary

Recently identified vulnerabilities in the Tenda AC1206 router highlight significant security concerns, particularly a critical stack-based buffer overflow associated with the ate_Tenda_mfg_check_usb function. This vulnerability allows attackers to manipulate specific arguments resulting in a buffer overflow, which can be exploited remotely. With versions up to 20241027 affected, this issue poses a grave risk as it could allow unauthorized access and control over the router. Given that this exploit has been publicly disclosed, it's crucial for users to be aware and apply necessary updates to safeguard against potential attacks.

References