CVE-2024-0994

creationtimestamp| type| source ---|---|--- 2024-01-29 03:26:44+00:00| seen| https://t.me/ctinow/175052 2024-02-21 09:06:45+00:00| seen| https://t.me/ctinow/189359...

CVE-2024-0994

CVE-2024-0994 affects Tenda W6 1.0.0.9(4122). The httpd component’s /goform/setcfm formSetCfm function can be triggered via the funcpara1 parameter to cause a stack-based buffer overflow. Exploitation can be performed remotely, and public disclosures exist. Remediation/advisories in connected dat...

CVE-2024-0994 Tenda W6 httpd setcfm formSetCfm stack-based overflow

A vulnerability was found in Tenda W6 1.0.0.94122. It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be...