EUVD-2024-32795

Malicious code in bioql PyPI...

CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4243

Summary: CVE-2024-4243 affects Tenda W9 1.0.0.7(4456) in the /goform/wifiSSIDset endpoint, specifically the formwrlSSIDset function. The vulnerability arises from sanitization/handling of the ssidIndex parameter, leading to a stack-based buffer overflow. Exploitation is possible remotely, and the...