Stack-based Buffer Overflow Vulnerability in Tenda AC7

CVE-2024-2894

What is CVE-2024-2894?

A stack-based buffer overflow vulnerability has been identified in the Tenda AC7 router that occurs within the formSetQosBand function of the /goform/SetNetControlList file. This flaw allows an attacker to manipulate the argument list, potentially leading to unauthorized access and exploitation. The vulnerability can be exploited remotely, increasing the risk to users. Despite early notification, Tenda has not responded to this serious security issue. Users are advised to monitor their systems and apply necessary security measures to mitigate risks associated with this vulnerability.

References