CVE-2024-11650CWE-404CWE-476

Tenda i9 GetIPTV websReadEvent null pointer dereference

High · published November 25, 2024

CVSS v4.0
7.1
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.01274 · 69.7th percentile
Weaknesses
CWE-404 · Improper Resource Shutdown or Release; CWE-476 · NULL Pointer Dereference
Published
2024-11-25T02:00Z
EPSS history
Timeline
  • 25 NOV 02:00Z
    Tenda i9 GetIPTV websReadEvent null pointer dereference
    cvelistv5