CVE-2024-25751: Buffer Overflow

Published Feb 26, 2024

Updated

A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the fromSetSysTime function.

Affected Software

4 affected components

Tenda Ac9=3.0

Tenda Ac9 Firmware=15.03.06.42_multi

All of the following

Tenda Ac9 Firmware=5.03.06.42_multi

Tenda Ac9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Tenda AC9 to a version that resolves this vulnerability.
Fixed in v.15.03.06.42_multi

Event History

Feb 26, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-25751?

CVE-2024-25751 is classified as a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2024-25751?

To mitigate CVE-2024-25751, you should update Tenda AC9 firmware to the latest version that addresses this vulnerability.

What versions are affected by CVE-2024-25751?

CVE-2024-25751 affects Tenda AC9 devices running firmware version v.15.03.06.42_multi.

What is the impact of CVE-2024-25751?

The impact of CVE-2024-25751 allows a remote attacker to execute arbitrary code on the affected device.

Can CVE-2024-25751 be exploited remotely?

Yes, CVE-2024-25751 can be exploited remotely, making it a significant security risk for users of the affected firmware.