CVE-2024-32286: Critical severity tenda w30e firmware vulnerability
Published Apr 17, 2024
·Updated
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function.
Affected Software
3 affected components
Tenda W30E
All of the following
Tenda W30e Firmware=1.0.1.25\(633\)
Tenda W30E
Event History
Apr 17, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-32286?
CVE-2024-32286 has a high severity rating due to its potential to allow remote code execution through a stack overflow.
2
How do I fix CVE-2024-32286?
To mitigate CVE-2024-32286, it is recommended to update the Tenda W30E firmware to the latest version supplied by the vendor.
3
What is the impact of CVE-2024-32286?
The impact of CVE-2024-32286 includes the possibility of unauthorized access and control over the affected device due to the stack overflow vulnerability.
4
Which devices are affected by CVE-2024-32286?
CVE-2024-32286 specifically affects Tenda W30E v1.0 devices running firmware version 1.0.1.25(633).
5
Is CVE-2024-32286 exploitable remotely?
Yes, CVE-2024-32286 is exploitable remotely, allowing attackers to execute arbitrary code without local access.