CVE-2024-28547 - Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function

MEDIUM

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function

Published Mar 18, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.50%

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Tenda	Ac18 Firmware	unknown	Affected 15.03.05.05

No remediation recorded yet.

Weaknesses (1)

CWE-121

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25644		Advisory
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/formSetFirewallCfg.md		ExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 18, 2024

Updated Aug 15, 2024

Reserved Mar 8, 2024

CISA Vulnrichment

Updated Mar 18, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 18, 2024

Updated Aug 15, 2024

GitHub

No data