CVE-2024-3879

CVE-2024-3879 concerns the Tenda W30E router (firmware 1.0.1.25(633)). The vulnerability is a stack-based overflow in the function formSetCfm of the file /goform/setcfm, triggered by manipulating the funcpara1 parameter. It allows remote exploitation and has been publicly disclosed. Connected sou...