Unrated severityNVD Advisory· Published Oct 23, 2024· Updated Oct 23, 2024

Tenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflow

CVE-2024-10281

Description

A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0 of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Tenda/RX2 Prollm-fuzzy2 versions
= 22.03.02.20 (RX9 Pro)+ 1 more
- (no CPE)range: = 22.03.02.20 (RX9 Pro)
- (no CPE)range: 22.03.02.10
Tenda/RX9llm-fuzzy2 versions
= 22.03.02.10 (RX9)+ 1 more
- (no CPE)range: = 22.03.02.10 (RX9)
- (no CPE)range: 22.03.02.10

Patches

Vulnerability mechanics

References

gitee.com/GXB0_0/iot-vul/blob/master/Tenda/RX9/20/SetStaticRouteCfg.mdmitreexploit
vuldb.commitrethird-party-advisory
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.tenda.com.cnmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000