Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-02208
HistoryJan 12, 2024 - 12:00 a.m.

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02208)

2024-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
tenda ax1803
buffer overflow
vulnerability
formgetiptv
denial of service
arbitrary code
wifi6
router
china

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda (China). A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stballvlans parameter of the formGetIptv method failing to correctly validate the length of the input data, and can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service attack.

CPENameOperatorVersion
tenda ax1803 v1.eq0.0.1

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Related for CNVD-2024-02208