CVE-2024-11248: Tenda AC10 SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow
A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11248?
CVE-2024-11248 is classified as a critical vulnerability due to its potential to cause a stack-based buffer overflow.
How do I fix CVE-2024-11248?
To fix CVE-2024-11248, update the Tenda AC10 firmware to the latest version that addresses this vulnerability.
What specific function is affected by CVE-2024-11248?
The vulnerability CVE-2024-11248 affects the formSetRebootTimer function in the /goform/SetSysAutoRebbotCfg file.
What type of attack can exploit CVE-2024-11248?
CVE-2024-11248 can be exploited through a stack-based buffer overflow attack by manipulating the rebootTime argument.
Which firmware version is vulnerable to CVE-2024-11248?
Firmware version 16.03.10.13 of the Tenda AC10 is vulnerable to CVE-2024-11248.