The vulnerability of the sub_42D4DC() function (/goform/SetSysTimeCfg) in the Tenda TX9 Pro router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42D4DC function /goform/SetSysTimeCfg of the Tenda TX9 Pro router’s microprogramming system is related to the issue of the operation exceeding the buffer boundaries in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to...

CVE-2024-4113: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...