Stack Overflow Vulnerability in Tenda TX9 Firmware
CVE-2024-51315

9.8CRITICAL

Key Information:

Vendor

Tenda
Status
TX9 Firmware
Vendor
CVE Published:
20 July 2026

What is CVE-2024-51315?

The Tenda TX9 firmware version V22.03.02.20 contains a stack overflow vulnerability within the sub_425964 function, specifically in the /goform/SetOnlineDevName file. This flaw may potentially allow an attacker to execute arbitrary code or affect the device's stability by exploiting the stack memory, underscoring the importance of firmware updates for maintaining security.

References

https://www.tendacn.com/download/detail-4515.html
https://gitee.com/GXB0_0/iot-vul/blob/master/Tenda/TX9/20...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.