CVE-2024-2816

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18

Description The issue is related to insufficient authentication of requests executed by the fromSysToolReboot() function, accessible through the "/goform/SysToolReboot" endpoint. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is also associated with cross-site request forgery.

Recommendations For version 15.03.05.18, consider disabling the fromSysToolReboot() function as a temporary workaround until a patch is available. Restrict access to the "/goform/SysToolReboot" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.