Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-18608
HistoryApr 18, 2024 - 12:00 a.m.

Tenda W30E fromRouteStatic function buffer overflow vulnerability

2024-04-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
tenda
w30e
buffer overflow
vulnerability
chinese company
remote attacker
arbitrary code
denial of service
cnvd

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version 1.0.1.25(633), which originates from the parameter page of the fromRouteStatic function in /goform/fromRouteStatic that fails to correctly validate the length of the input data, and could be exploited by a remote attacker to execute arbitrary code on the system or cause a denial of service attack.

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for CNVD-2024-18608