Lucene search

MitreCVE-2024-40414

HistoryJul 15, 2024 - 5:15 p.m.

CVE-2024-40414

2024-07-1517:15:02

CWE-787

CWE-121

mitre

web.nvd.nist.gov

vulnerability

tenda ax1806

buffer overflow

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

38.4%

JSON

A vulnerability in /goform/SetNetControlList in the sub_656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

Affected configurations

Nvd

Node

tendaax1806_firmwareMatch1.0.0.1

AND

tendaax1806Match-

VendorProductVersionCPE
tendaax1806_firmware1.0.0.1cpe:2.3:o:tenda:ax1806_firmware:1.0.0.1:*:*:*:*:*:*:*
tendaax1806-cpe:2.3:h:tenda:ax1806:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ax1806_firmware	1.0.0.1	cpe:2.3:o:tenda:ax1806_firmware:1.0.0.1:::::::*
tenda	ax1806	-	cpe:2.3:h:tenda:ax1806:-:::::::*

References

github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/2/SetNetControlList.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

38.4%

JSON

Related for CVE-2024-40414