CVE-2024-0540CWE-121

Tenda W9 httpd formOfflineSet stack-based overflow

Medium · published January 15, 2024

CVSS v3.1
6.3
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250710 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00793 · 55.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-01-15T04:31Z
EPSS history
Timeline
  • 15 JAN 04:31Z
    Tenda W9 httpd formOfflineSet stack-based overflow
    cvelistv5