Cyber Posture

CVE-2024-57575

Critical

Published: 16 January 2025

Published
16 January 2025
Modified
03 February 2025
KEV Added
—
Patch
—
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0043 62.9th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.

Security Summary

CVE-2024-57575 is a stack overflow vulnerability (CWE-787) affecting the Tenda AC18 router in version V15.03.05.19. The flaw occurs in the form_fast_setting_wifi_set function when processing a specially crafted ssid parameter, which can overwrite the stack buffer and lead to unintended control flow hijacking.

The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is exploitable remotely over the network with low attack complexity, no required privileges or user interaction, and unchanged impact scope. Unauthenticated attackers can send malformed requests to the vulnerable endpoint, potentially achieving remote code execution with high impacts on confidentiality, integrity, and availability.

Mitigation details are available in the referenced advisory at https://github.com/qijiale/Tenda/blob/main/1/Readme.md, published on 2025-01-16.

Details

CWE(s)
CWE-787

Affected Products

tenda
ac18 firmware
15.03.05.19

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1210 Exploitation of Remote Services Lateral Movement
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
attack.mitre.org →
Why these techniques?

Stack overflow in the router's web management interface (form_fast_setting_wifi_set via ssid parameter) enables remote code execution on a public-facing application.

References