Stack-Based Buffer Overflow in Tenda AC10U Wi-Fi Router

CVE-2024-2706

Summary

A serious stack-based buffer overflow vulnerability exists in the Tenda AC10U router, specifically in the function formWifiWpsStart of the /goform/WifiWpsStart file. This vulnerability allows an attacker to manipulate the index argument, potentially leading to unauthorized memory access and code execution. The flaw can be exploited remotely, raising significant concerns for users and network integrity. Despite early disclosure efforts to the vendor, response has not been received, leaving the affected product vulnerable to exploitation in the wild. Organizations using the Tenda AC10U should take immediate action to mitigate associated risks.

References