Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14309
HistoryMar 19, 2024 - 12:00 a.m.

Tenda AC18 fromSetWirelessRepeat function buffer overflow vulnerability

2024-03-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
tenda
ac18
buffer overflow
vulnerability
wpapsk_crypto5g
remote attacker
arbitrary code
denial of service
attack
chinese company

8.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the wpapsk_crypto5g parameter of the fromSetWirelessRepeat function failing to correctly validate the length of the input data, which can be exploited by a remote attacker to execute arbitrary code on the system or cause a denial of service attack.

CPENameOperatorVersion
tenda ac18 15.eq13.07.09

8.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for CNVD-2024-14309