Stack-Based Buffer Overflow in Tenda AC15 Wi-Fi Router

CVE-2024-2810

What is CVE-2024-2810?

A severe stack-based buffer overflow vulnerability has been identified in the Tenda AC15 Wi-Fi router within the formWifiWpsOOB function located in the /goform/WifiWpsOOB file. This flaw arises from improper handling of the 'index' argument, allowing attackers to manipulate the input and potentially execute remote code. Given that the exploit can be triggered without physical access to the device, the risk is heightened, especially in environments reliant on vulnerable versions. Despite early warnings, Tenda has not issued any response regarding this security issue, leaving users potentially exposed to exploitation. It's crucial for users of the affected versions to apply available security measures and monitor for potential attacks.

References