Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14375
HistoryJan 31, 2024 - 12:00 a.m.

Tenda i6 formWifiMacFilterGet function buffer overflow vulnerability

2024-01-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
tenda i6
wireless access point
buffer overflow
vulnerability
formwifimacfilterget
remote attacker
arbitrary code
denial of service
cnvd

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.7%

Tenda i6 is a wireless access point from Tenda (China). A buffer overflow vulnerability exists in Tenda i6 version 1.0.0.9, which originates from the index parameter of the formWifiMacFilterGet function in /goform/WifiMacFilterGet that fails to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on the system or cause a denial of service attack.

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.7%

Related for CNVD-2024-14375