CVE-2024-0996 – Tenda i9 httpd setcfm formSetCfm stack-based overflow

https://notcve.org/view.php?id=CVE-2024-0996

A vulnerability classified as critical has been found in Tenda i9 1.0.0.9(4122). This affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://jylsec.notion.site/Tenda-i9-has-stack-buffer-overflow-vulnerability-in-formSetCfm-c1bd9745c81e4207aceeaa1ba5e10563?pvs=4 https://vuldb.com/?ctiid.252261 https://vuldb.com/?id.252261 • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •