VYPR
Unrated severityNVD Advisory· Published Oct 23, 2024· Updated Oct 23, 2024

Tenda RX9/RX9 Pro SetNetControlList sub_4337EC stack-based overflow

CVE-2024-10283

Description

A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the function sub_4337EC of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

4
  • Tenda/RX9llm-create2 versions
    = 22.03.02.20+ 1 more
    • (no CPE)range: = 22.03.02.20
    • (no CPE)range: 22.03.02.20
  • Tenda/RX2 Prollm-fuzzy2 versions
    = 22.03.02.20+ 1 more
    • (no CPE)range: = 22.03.02.20
    • (no CPE)range: 22.03.02.20

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.