CVE-2024-51315
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Tenda TX9 firmware version V22.03.02.20 in the sub_425964 function of the /goform/SetOnlineDevName file. An attacker can remotely exploit this flaw to execute arbitrary code.
Risk Assessment
The risk for the organization is the potential for remote takeover of the Tenda TX9 device, which could lead to network integrity compromise and data leakage.
Recommendation
It is recommended to immediately update the Tenda TX9 firmware to the latest version that fixes this vulnerability. If an update is not available, restrict access to the device management interface.
Original NVD description (English source)
The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName