CVE-2024-2547

Summary

CVE-2024-2547 is a critical vulnerability affecting the Tenda AC18 model with firmware version 15.03.05.05. This issue lies in the R7WebsSecurityHandler function, which experiences a stack-based buffer overflow when the password argument is manipulated. The exploit can be executed remotely, and the vulnerability identifier is VDB-257000. Notably, the public has gained access to the exploit, making it a serious concern for users who have not yet patched their devices. Despite early disclosure to the vendor, they have not responded or provided a remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.