Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-02209
HistoryJan 12, 2024 - 12:00 a.m.

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02209)

2024-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
tenda
ax1803
buffer overflow
vulnerability
adv.iptv.stbpvid
arbitrary code
denial of service
cnvd-2024-02209

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda (China). A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stbpvid parameter of the formGetIptv method failing to correctly validate the length of the input data, and can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service attack.

CPENameOperatorVersion
tenda ax1803 v1.eq0.0.1

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Related for CNVD-2024-02209