Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-06247
HistoryDec 22, 2023 - 12:00 a.m.

Tenda i29 spdtstConfigAndStart method buffer overflow vulnerability

2023-12-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
1
tenda i29
buffer overflow
spdtstconfigandstart
validation
input data
remote attacker
arbitrary code
denial of service
cnvd

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the ip parameter of the spdtstConfigAndStart method failing to properly validate the length and size of the input data, which can be exploited by a remote attacker to execute arbitrary code on the system or cause a denial of service attack.

CPENameOperatorVersion
tenda i29 v1.eq0.0.2
tenda i29 v1.eq0.0.5

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

Related for CNVD-2024-06247