CVE-2024-57580
Published: 16 January 2025
Description
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Security Summary
CVE-2024-57580 is a stack-based buffer overflow vulnerability (CWE-787) affecting the Tenda AC18 router running firmware version V15.03.05.19. The flaw occurs in the formSetDeviceName function when processing the devName parameter, allowing an attacker to overwrite the stack with uncontrolled input. This issue was published on January 16, 2025, and carries a CVSS v3.1 base score of 9.8, indicating critical severity due to its network accessibility and high impact potential.
The vulnerability can be exploited by any remote, unauthenticated attacker with network access to the affected device, requiring low complexity and no user interaction. Successful exploitation enables high-impact consequences across confidentiality, integrity, and availability (C:H/I:H/A:H), potentially leading to full remote code execution, device takeover, or denial of service.
Analysis and proof-of-concept details are available in the GitHub repository at https://github.com/qijiale/Tenda/tree/main/7, though no official vendor advisories or patches are referenced in the available information.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Stack overflow in the web management interface (formSetDeviceName via devName parameter) enables remote code execution on the public-facing router application.