{"id":"CVE-2024-2547","state":"PUBLISHED","title":"Tenda AC18 R7WebsSecurityHandler stack-based overflow","description":"A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257000. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2024-03-17T03:31:03.829Z","updatedAt":"2024-08-21T15:16:52.674Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"VulDB"},"assigner":"VulDB","products":["Tenda AC18"],"affected":[{"vendor":"Tenda","product":"AC18","versions":[{"version":"15.03.05.05","status":"affected"}]}],"references":["https://vuldb.com/?id.257000","https://vuldb.com/?ctiid.257000","https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/R7WebsSecurityHandler.md"],"weaknesses":["CWE-121"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/2xxx/CVE-2024-2547.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-2547","state":"PUBLISHED","datePublished":"2024-03-17T03:31:03.829Z","dateUpdated":"2024-08-21T15:16:52.674Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-03-15T20:04:28.272Z"},"containers":{"cna":{"title":"Tenda AC18 R7WebsSecurityHandler stack-based overflow","descriptions":[{"lang":"en","value":"A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257000. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Eine Schwachstelle wurde in Tenda AC18 15.03.05.05 gefunden. Sie wurde als kritisch eingestuft. Davon betroffen ist die Funktion R7WebsSecurityHandler. Durch das Manipulieren des Arguments password mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"Tenda","product":"AC18","versions":[{"version":"15.03.05.05","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.257000","name":"VDB-257000 | Tenda AC18 R7WebsSecurityHandler stack-based overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.257000","name":"VDB-257000 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/R7WebsSecurityHandler.md","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","type":"CWE","lang":"en","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-03-17T03:31:03.829Z"},"timeline":[{"time":"2024-03-15T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-03-15T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-03-15T21:09:51.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"yhryhryhr_backup (VulDB User)","type":"reporter"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.257000","name":"VDB-257000 | Tenda AC18 R7WebsSecurityHandler stack-based overflow","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.257000","name":"VDB-257000 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required","x_transferred"]},{"url":"https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC18/R7WebsSecurityHandler.md","tags":["exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T19:18:48.212Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"tenda","product":"ac18_firmware","defaultStatus":"unknown","versions":[{"version":"15.03.05.05","status":"affected"}],"cpes":["cpe:2.3:o:tenda:ac18_firmware:15.03.05.05:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-21T15:14:45.903222Z","id":"CVE-2024-2547","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-21T15:16:52.674Z"}}]}}}