CVE-2024-10662: Tenda AC15 SetOnlineDevName formSetDeviceName stack-based overflow
A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10662?
CVE-2024-10662 is classified as critical due to the potential for remote exploitation leading to a stack-based buffer overflow.
How do I fix CVE-2024-10662?
To mitigate CVE-2024-10662, update the Tenda AC15 firmware to a more secure version beyond 15.03.05.19 if available.
What does CVE-2024-10662 affect?
CVE-2024-10662 affects the Tenda AC15 firmware version 15.03.05.19 specifically.
Can CVE-2024-10662 be exploited remotely?
Yes, CVE-2024-10662 can be exploited remotely due to its nature as a vulnerability in a web-based interface.
What is the attack vector for CVE-2024-10662?
The attack vector for CVE-2024-10662 involves manipulating the 'devName' argument in the function 'formSetDeviceName'.