CVE-2024-0927

Summary

CVE-2024-0927 is a critical vulnerability affecting the Tenda AC10U with firmware version 15.03.06.49_multi_TDE01. The issue lies within the fromAddressNat function, which can be exploited through manipulation of the entrys/mitInterface/page argument. This results in a stack-based buffer overflow, allowing for remote attacks. The vulnerability, identified as VDB-252132, has been disclosed to the public and could be exploited without the vendor's response.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.