CVE-2024-51313
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A stack overflow vulnerability was discovered in Tenda TX9 firmware version V22.03.02.20 in the sub_42EA38 function of the /goform/SetVirtualServerCfg file. An attacker can remotely exploit this flaw to execute arbitrary code or cause a denial of service.
Risk Assessment
The risk for the organization includes potential remote takeover of the Tenda TX9 device, leading to network integrity compromise, data leakage, or service disruption.
Recommendation
Immediately update the Tenda TX9 firmware to the latest available version that fixes this vulnerability. If no update is available, restrict access to the device management interface to trusted networks only.
Original NVD description (English source)
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg.