CVE-2024-0930

CRITIQUE 9.8CVE-2024-0930 · Published 26/01/2024 · updated 17/06/2026

En bref

CVE-2024-0930 est une vulnérabilité CRITIQUE (CVSS 9.8).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 15.2%, plus élevée que 96.8% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49_multi_TDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252135. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

yaoyue123/iot · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free