cve/2024/CVE-2024-25753.md

CVE-2024-25753

Description

Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function.

POC

Reference

• https://github.com/TimeSeg/IOT_CVE/blob/main/tenda/AC9V3/0218/formSetDeviceName.md
• https://github.com/TimeSeg/IOT_CVE/blob/main/tenda/AC9V3/0218/formSetDeviceName.md

Github

• https://github.com/codeb0ss/CVE-2024-25735-PoC
• https://github.com/fkie-cad/nvd-json-data-feeds