Stack-based Buffer Overflow Vulnerability in Tenda AC18 Router

CVE-2024-2547

What is CVE-2024-2547?

A severe vulnerability has been identified in the Tenda AC18 router, specifically within the R7WebsSecurityHandler function. This security flaw allows an attacker to manipulate the 'password' argument, leading to a stack-based buffer overflow. The exploit can be executed remotely, posing a significant risk to users. The vulnerability's public disclosure raises concerns about its potential exploitation. Despite attempts to notify Tenda, there has been no response regarding this critical issue, heightening the concern for the security of the device. Immediate action is recommended for users of affected versions to safeguard against potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References