CVE-2024-0538: Tenda W9 httpd formQosManage_auto stack-based overflow
A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManageauto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0538?
CVE-2024-0538 is classified as a critical vulnerability.
How does CVE-2024-0538 affect Tenda W9?
CVE-2024-0538 can lead to a stack-based buffer overflow in the formQosManage_auto function due to manipulations of the ssidIndex argument.
Can CVE-2024-0538 be exploited remotely?
Yes, the vulnerability can be exploited remotely.
What versions of Tenda W9 are affected by CVE-2024-0538?
Tenda W9 versions 1.0.0.7(4456) are affected by CVE-2024-0538.
How can I mitigate CVE-2024-0538?
Mitigation for CVE-2024-0538 requires upgrading to a patched version of the Tenda W9 firmware.