CVE-2024-0991

CVE-2024-0991 concerns the Tenda i6 device (firmware version 1.0.0.9(3857)) and targets the httpd component, specifically the formSetCfm function in /goform/setcfm. The vulnerability arises from improper validation of the funcpara1 parameter, causing a stack-based buffer overflow. This allows rem...