Stack-Based Buffer Overflow in Tenda AC10U Router

CVE-2024-2704

What is CVE-2024-2704?

A critical vulnerability has been discovered in the Tenda AC10U router that allows for a stack-based buffer overflow through improper handling of the 'firewallEn' argument in the formSetFirewallCfg function. This flaw can be exploited remotely by an attacker, potentially allowing unauthorized access to network configurations. Despite being disclosed to the vendor, Tenda has not responded to the report. Users of the Tenda AC10U router are advised to take immediate precautions to secure their devices and monitor for any suspicious activity on their networks.

References