Stack-based Buffer Overflow Vulnerability in Tenda AC10U

CVE-2024-2711

What is CVE-2024-2711?

A vulnerability affecting the Tenda AC10U router, specifically in the function addWifiMacFilter within the /goform/addWifiMacFilter file, allows for a stack-based buffer overflow. By manipulating the deviceMac argument, an attacker can exploit this security flaw remotely. The implications of this vulnerability are significant, as unauthorized access could lead to potential control over the device. Security measures and patches are necessary to safeguard against exploitation, as this vulnerability has been disclosed publicly and is available for potential attacks.

References