Vulnerability in Tenda i22 1.0.0.3(4687) Could Lead to Remote Buffer Overflow
CVE-2024-7583

9.8CRITICAL

Key Information:

Vendor

Tenda
Status
I22 Firmware
Vendor
CVE Published:
7 August 2024

What is CVE-2024-7583?

A buffer overflow vulnerability has been identified in the Tenda i22, specifically within the apPortalOneKeyAuth function. The flaw arises from improper handling of the argument data within the /goform/apPortalOneKeyAuth file, allowing attackers to exploit the vulnerability remotely. If successfully exploited, this can lead to potential unauthorized manipulation or access to the device. Despite efforts to notify the vendor regarding this serious issue, there has been no response, heightening the urgency for affected users to seek immediate remediation.

References

https://vuldb.com/?id.273863
https://vuldb.com/?ctiid.273863
https://vuldb.com/?submit.382835

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-7583 : Vulnerability in Tenda i22 1.0.0.3(4687) Could Lead to Remote Buffer Overflow