CVE-2024-57483

Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function

Critical · published January 14, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in Tenda i24's addWifiMacFilter function could turn your router into a hacker's playground! Think of it as a packed suitcase that just bursts open, spilling all your clothes everywhere. An attacker can stuff in more data than the suitcase is meant to hold, causing it to overflow and let them slip in malicious code. This critical vulnerability means an attacker could execute arbitrary code on your router, potentially giving them complete control over your network. Imagine someone accessing your sensitive information or manipulating settings without you even knowing!

Put simply

Think of it as a packed suitcase that just bursts open, spilling all your clothes everywhere. An attacker can stuff in more data than the suitcase is meant to hold, causing it to overflow and let them slip in malicious code. The vulnerability resides in the addWifiMacFilter function, which fails to properly validate input sizes, leading to a buffer overflow that can be exploited to execute arbitrary code.

What to do

This critical vulnerability means an attacker could execute arbitrary code on your router, potentially giving them complete control over your network. Imagine someone accessing your sensitive information or manipulating settings without you even knowing! Immediately update your Tenda i24 to version V2.0.0.6 to address this vulnerability. Review your network settings and consider changing default passwords to enhance security. Keep your firmware regularly updated in the future! You've got this! Follow these steps, and your network will be safer in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.3th percentile
Published
2025-01-14T00:00Z
EPSS history
Timeline
  • 14 JAN 00:00Z
    Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function
    cvelistv5