CVE-2024-44556: Critical severity tenda ax1806 firmware vulnerability
Published Aug 26, 2024
·Updated
Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
Affected Software
2 affected components
All of the following
Tenda Ax1806 Firmware=1.0.0.1
Tenda AX1806
Event History
Aug 26, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-44556?
CVE-2024-44556 is classified as a critical vulnerability due to the potential for remote code execution from a stack overflow.
2
How do I fix CVE-2024-44556?
To mitigate CVE-2024-44556, update the Tenda AX1806 firmware to the latest version provided by Tenda.
3
What are the implications of CVE-2024-44556 on Tenda AX1806?
CVE-2024-44556 can allow an attacker to exploit a stack overflow, potentially leading to system crashes or control over the device.
4
Which devices are affected by CVE-2024-44556?
Only the Tenda AX1806 running firmware version 1.0.0.1 is affected by CVE-2024-44556.
5
Is there a workaround for CVE-2024-44556?
Currently, the only effective workaround for CVE-2024-44556 is to update the firmware on the Tenda AX1806.