6.8
CVE-2024-40412
- EPSS 0.34%
- Veröffentlicht 10.07.2024 16:15:04
- Zuletzt bearbeitet 07.07.2025 16:20:02
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tenda ≫ Ax12 Firmware Version22.03.01.46
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.26 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 6.8 | 2.1 | 4.7 |
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX12/1/README.md
https://static.tenda.com.cn/tdcweb/download/uploadfile/AX12/V22.03.01.46.zip