Stack-based Buffer Overflow Vulnerability in Tenda AC7

CVE-2024-2895

What is CVE-2024-2895?

A vulnerability exists in the Tenda AC7 router related to a stack-based buffer overflow triggered by manipulation of the 'index' argument in the formWifiWpsOOB function located in the /goform/WifiWpsOOB file. This remote exploit can compromise the device's operational integrity, potentially allowing unauthorized access or control. The vulnerability has been publicly disclosed, highlighting the urgent need for affected users to assess their security posture and update their devices accordingly. Notably, vendor engagement regarding this vulnerability has been unresponsive, emphasizing the critical importance for users to take proactive measures.

References