CVE-2024-0996

CVE-2024-0996 affects Tenda i9 1.0.0.9(4122) via the httpd component, in the function formSetCfm of /goform/setcfm. The root cause is a stack-based buffer overflow triggered by manipulating the funcpara1 argument, enabling a remote attacker to exploit the vulnerability. Public exploits have been ...