PT-2024-24505
CVE-2024-32317
·
تاريخ النشر
2024-04-17
·
تاريخ التحديث
2025-03-17
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Tenda AC10 v4.0 V16.03.10.13
Tenda AC10 v4.0 V16.03.10.20
Description
The issue is a stack overflow vulnerability. It occurs via the
adslPwd parameter in the formWanParameterSetting function.Recommendations
For Tenda AC10 v4.0 V16.03.10.13, avoid using the
adslPwd parameter in the formWanParameterSetting function until a patch is available.
For Tenda AC10 v4.0 V16.03.10.20, avoid using the adslPwd parameter in the formWanParameterSetting function until a patch is available.
As a temporary workaround, consider disabling the formWanParameterSetting function until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾