CVE-2024-2764

Summary

CVE-2024-2764 is a critical vulnerability affecting the Tenda AC15.03.06.48 firmware. The issue lies within the formSetPPTPServer function of the SetPptpServerCfg file. Manipulation of the endIP argument can lead to a stack-based buffer overflow, enabling remote attack. The exploit has been disclosed publicly, increasing the risk of potential exploitations. The vulnerability has been assigned the identifier VDB-257601. Unfortunately, efforts to alert the vendor about the disclosure were unsuccessful.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.