Unrated severityNVD Advisory· Published Oct 23, 2024· Updated Oct 23, 2024

Tenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflow

CVE-2024-10282

Description

A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the function sub_42EA38 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Tenda/RX2 Prollm-fuzzy2 versions
22.03.02.10, 22.03.02.20+ 1 more
- (no CPE)range: 22.03.02.10, 22.03.02.20
- (no CPE)range: 22.03.02.10
Tenda/RX9llm-fuzzy2 versions
22.03.02.10, 22.03.02.20+ 1 more
- (no CPE)range: 22.03.02.10, 22.03.02.20
- (no CPE)range: 22.03.02.10

Patches

Vulnerability mechanics

References

gitee.com/GXB0_0/iot-vul/blob/master/Tenda/RX9/20/SetVirtualServerCfg.mdmitreexploit
vuldb.commitrethird-party-advisory
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.tenda.com.cnmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000