Remote Stack-Based Buffer Overflow in Tenda AC18 Router

CVE-2024-2490

Summary

A vulnerability exists in the Tenda AC18 router, specifically in the function setSchedWifi located in the openSchedWifi file. This flaw allows for remote manipulation of the schedStartTime and schedEndTime arguments, leading to a stack-based buffer overflow. This could enable an attacker to exploit the vulnerability from a remote location, potentially compromising the device's operation or gaining unauthorized access. The vulnerability has been publicly disclosed, which heightens security risks. The vendor was notified prior to this disclosure but has not responded, leaving users at risk. It is advised that users of the Tenda AC18 take immediate measures to secure their devices.

References