CVE-2024-24543

Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker to cause a denial…

Critical · published February 5, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

🚨 A remote attack can exploit this buffer overflow in Tenda AC9 routers, leading to a potential denial of service or arbitrary code execution! 🔥 Think of it like overfilling a soda cup until it spills everywhere—too much data can cause the system to crash or even run unwanted programs, just like that sticky mess on your table! If exploited, an attacker could bring your entire network to a standstill or execute malicious code, leaving your devices vulnerable and your data at risk. This situation could be absolutely devastating, as it opens the door to unauthorized access or service interruptions.

Put simply

Think of it like overfilling a soda cup until it spills everywhere—too much data can cause the system to crash or even run unwanted programs, just like that sticky mess on your table! This critical buffer overflow vulnerability in the setSchedWifi function of Tenda AC9 firmware allows attackers to send specially crafted data that exceeds allocated memory space, resulting in potential code execution or denial of service.

What to do

If exploited, an attacker could bring your entire network to a standstill or execute malicious code, leaving your devices vulnerable and your data at risk. This situation could be absolutely devastating, as it opens the door to unauthorized access or service interruptions. To protect your network, immediately update the Tenda AC9 firmware to the latest version provided by the manufacturer, ensuring you have the patched version that resolves this issue. Regularly review and apply updates to keep vulnerabilities at bay! You've got this! Follow these steps to secure your network and become a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01028 · 63.3th percentile
Published
2024-02-05T00:00Z
EPSS history
Timeline
  • 05 FEB 00:00Z
    Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware version v.15.03.06.42_multi allows a remote attacker to cause a denial…
    cvelistv5