CVE-2024-40417

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40417
A vulnerability was found in Tenda AX1806 1.0.0.1. Affected by this issue is the function formSetRebootTimer of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/1/SetIpMacBind.md Broken Link
https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/1/SetIpMacBind.md Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:ax1806_firmware:1.0.0.1:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ax1806:-:*:*:*:*:*:*:*
History

07 Apr 2025, 17:44

Type Values Removed Values Added
First Time Tenda
Tenda ax1806
Tenda ax1806 Firmware
CPE cpe:2.3:o:tenda:ax1806_firmware:1.0.0.1:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ax1806:-:*:*:*:*:*:*:*
References () https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/1/SetIpMacBind.md - () https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX_1806/1/SetIpMacBind.md - Broken Link
Information

Published : 2024-07-10 16:15

Updated : 2025-04-07 17:44

NVD link : CVE-2024-40417

Mitre link : CVE-2024-40417

CVE.ORG link : CVE-2024-40417

JSON object : View

Products Affected

tenda

  • ax1806_firmware
  • ax1806
CWE
CWE-121

Stack-based Buffer Overflow