CVE-2024-10661: Tenda AC15 SetDlnaCfg stack-based overflow
A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10661?
CVE-2024-10661 is classified as critical due to its potential for remote exploitation and stack-based buffer overflow.
How do I fix CVE-2024-10661?
To mitigate CVE-2024-10661, upgrade to a patched version of the Tenda AC15 firmware that addresses this specific vulnerability.
What type of attack is possible with CVE-2024-10661?
CVE-2024-10661 allows an attacker to execute a remote attack leading to a buffer overflow due to manipulation of the scanList argument.
Which device is impacted by CVE-2024-10661?
The vulnerability CVE-2024-10661 affects the Tenda AC15 router running firmware version 15.03.05.19.
Is CVE-2024-10661 exploitable without authentication?
Yes, CVE-2024-10661 can be exploited remotely without authentication, making it particularly dangerous.