CVE-2024-32306

Name of the Vulnerable Software and Affected Versions Tenda AC10U version 1.0 Firmware v15.03.06.49

Description The issue is a stack overflow vulnerability. It is located via the PPW parameter in the fromWizardHandle function.

Recommendations For Tenda AC10U version 1.0 Firmware v15.03.06.49, consider disabling the fromWizardHandle function until a patch is available. Restrict access to the PPW parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.