CVE-2024-10698

🗓️ 02 Nov 2024 13:31:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

Vulnerability in Tenda AC6 15.03.05.19, allows remote stack-based buffer overflow via formSetDeviceName functio

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-10698	2 Nov 202415:35	–	circl
CNNVD	Tenda AC6 安全漏洞	2 Nov 202400:00	–	cnnvd
CNVD	Tenda AC6 Buffer Overflow Vulnerability (CNVD-2024-44860)	7 Nov 202400:00	–	cnvd
Cvelist	CVE-2024-10698 Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow	2 Nov 202413:31	–	cvelist
EUVD	EUVD-2024-33252	3 Oct 202520:07	–	euvd
NVD	CVE-2024-10698	2 Nov 202414:15	–	nvd
OSV	CVE-2024-10698	2 Nov 202414:15	–	osv
Positive Technologies	PT-2024-8701 · Tenda · Tenda Ac6	9 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-10698	5 Feb 202504:53	–	redhatcve
Vulnrichment	CVE-2024-10698 Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow	2 Nov 202413:31	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

tenda ac6_firmwareMatch15.03.05.19

AND

tenda ac6Match-

[
  {
    "vendor": "Tenda",
    "product": "AC6",
    "versions": [
      {
        "version": "15.03.05.19",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/theRaz0r/iot-mycve/blob/main/tenda_ac6_stackflow_formSetDeviceName/tenda_ac6_stackflow_formSetDeviceName.md
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
devName	request body	/goform/SetOnlineDevName	Stack-based buffer overflow via devName in SetOnlineDevName function (remote exploit); vulnerable to arbitrary code execution.	CWE-787, CWE-121

04 Nov 2024 14:20Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8 - 9.8

CVSS 48.7

CVSS 29

CVSS 38.8

EPSS0.01905

SSVC