CVE-2024-2815

Summary

A critical vulnerability, identified as CVE-2024-2815, has been discovered in Tenda AC15 15.03.20_multi. The vulnerability affects the R7WebsSecurityHandler function in the Cookie Handler component's /goform/execCommand file. It allows for remote stack-based buffer overflow through manipulation of the "password" argument. The exploit has been made public, posing a significant risk to organizations using this product. The vendor was notified but did not respond. Remediation measures should be implemented promptly to mitigate the potential impact.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.