Lucene search

K
cveMitreCVE-2024-46049
HistorySep 13, 2024 - 2:15 p.m.

CVE-2024-46049

2024-09-1314:15:14
CWE-121
CWE-787
mitre
web.nvd.nist.gov
24
tenda o6 v3.0
firmware
stack overflow
vulnerability
formexecommand function

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

47.1%

Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.

Affected configurations

Nvd
Node
tendao6_firmwareMatch1.0.0.7\(2054\)
AND
tendao6Match-
VendorProductVersionCPE
tendao6_firmware1.0.0.7(2054)cpe:2.3:o:tenda:o6_firmware:1.0.0.7\(2054\):*:*:*:*:*:*:*
tendao6-cpe:2.3:h:tenda:o6:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

47.1%

Related for CVE-2024-46049