CVE-2024-40415 — A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow

CRITICAL

A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow

Published Jul 15, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.46%

A vulnerability in /goform/SetStaticRouteCfg in the sub_519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
1.0.0.1	affected	-

No remediation recorded yet.

0.46% 0.00463

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00463

2024–2026

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.46% (0.00463)	37.79th	v5 (v2026.06.15)
Jun 15, 2026	0.46% (0.00463)	36.36th	v5 (v2026.06.15)
Mar 17, 2025	0.18% (0.00175)	36.69th	v4 (v2025.03.14)
Dec 12, 2024	0.09% (0.00091)	40.69th	v3 (v2023.03.01)
Jul 16, 2024	0.04% (0.00043)	9.28th	v3 (v2023.03.01)