CVE-2024-57575

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function

Critical · published January 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

🚨 A stack overflow in the Tenda AC18 could turn your home network into a hacker's playground! 🔥 Think of it like a traffic jam on a one-lane road where every car keeps trying to squeeze into the same space — eventually, everything comes to a halt, and control is lost. That's exactly what happens when the ssid parameter overflows, leading to potential chaos in your device! An attacker could exploit this stack overflow to execute arbitrary code, effectively compromising your router. This means they could gain unauthorized access to your network, snoop on your data, or even take complete control of your devices. The consequences could be devastating, allowing for data theft or network manipulation!

Put simply

Think of it like a traffic jam on a one-lane road where every car keeps trying to squeeze into the same space — eventually, everything comes to a halt, and control is lost. That's exactly what happens when the ssid parameter overflows, leading to potential chaos in your device! This vulnerability arises from a stack overflow in the 'form_fast_setting_wifi_set' function when handling the ssid parameter, enabling attackers to execute their code on the device.

What to do

An attacker could exploit this stack overflow to execute arbitrary code, effectively compromising your router. This means they could gain unauthorized access to your network, snoop on your data, or even take complete control of your devices. The consequences could be devastating, allowing for data theft or network manipulation! To protect yourself, immediately update to the latest firmware version that addresses CVE-2024-57575. Regularly monitor your device for updates and consider changing your default credentials to enhance your security. Don't leave any room for intruders! You're on it! Follow these steps and keep your network safe — security hero status: activated! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00792 · 55.9th percentile
Published
2025-01-16T00:00Z
EPSS history
Timeline
  • 16 JAN 00:00Z
    Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function
    cvelistv5