CVE-2024-0540

CVE-2024-0540 affects Tenda W9 v1.0.0.7(4456) in the httpd component, specifically the formOfflineSet function. The issue is a stack-based buffer overflow caused by manipulating the ssidIndex argument, enabling remote exploitation. Public exploit information exists. A practical workaround suggest...

CVE-2024-0540 Tenda W9 httpd formOfflineSet stack-based overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has bee...