Stack-based Buffer Overflow Vulnerability in Tenda AC18 Router

CVE-2024-2547

Summary

A severe vulnerability has been identified in the Tenda AC18 router, specifically within the R7WebsSecurityHandler function. This security flaw allows an attacker to manipulate the 'password' argument, leading to a stack-based buffer overflow. The exploit can be executed remotely, posing a significant risk to users. The vulnerability's public disclosure raises concerns about its potential exploitation. Despite attempts to notify Tenda, there has been no response regarding this critical issue, heightening the concern for the security of the device. Immediate action is recommended for users of affected versions to safeguard against potential attacks.

References