Vulnerability · Published Oct 23, 2024 · Assigned by VulDB

CVE-2024-10280Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference

Medium 6.5

In plain English

A medium-severity null pointer dereference in AC10 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.8%top 43.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
Tenda	AC6	20241022
Tenda	AC7	20241022
Tenda	AC8	20241022
Tenda	AC9	20241022
Tenda	AC10	20241022
Tenda	AC10U	20241022
Tenda	AC15	20241022
Tenda	AC18	20241022
Tenda	AC500	20241022
Tenda	AC1206	20241022

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

VDB-281555 | Tenda AC6/AC7/AC8/AC9/AC10/AC10U/AC15/AC18/AC500/AC1206 GetIPTV websReadEvent null pointer dereference vdb-entry, technical-description
VDB-281555 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #426417 | Tenda AC8v4 V16.03.34.06 NULL Pointer Dereference third-party-advisory
https://github.com/JohenanLi/router_vuls/blob/main/websReadEvent/websReadEvent.md exploit
https://www.tenda.com.cn/ product