CVE-2024-2805

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been rated as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-2805

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been rated as critical. Affected by this issue is the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-2805

Summary: CVE-2024-2805 affects Tenda AC15 routers (versions 15.03.05.18–15.03.20_multi) via the /goform/SetSpeedWan endpoint. The root cause is a stack-based buffer overflow triggered by manipulating the speed_dir argument in the formSetSpeedWan function, which can be exploited remotely and may i...