Vulnerability Description
A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac15 Firmware | 15.03.05.18 |
| Tenda | Ac15 | - |
| Tenda | Ac7 Firmware | 15.03.06.44 |
| Tenda | Ac7 | - |
| Tenda | Ac10U Firmware | 15.03.06.48 |
| Tenda | Ac10U | - |
| Tenda | Ac500 Firmware | 1.0.0.14 |
| Tenda | Ac500 | - |
| Tenda | Ac18 Firmware | 15.03.05.05 |
| Tenda | Ac18 | - |
| Tenda | Ac9 Firmware | 15.03.2.13 |
| Tenda | Ac9 | 1.0 |
| Tenda | Ac1206 Firmware | 15.03.06.23 |
| Tenda | Ac1206 | - |
| Tenda | Ac6 Firmware | 15.03.06.23 |
| Tenda | Ac6 | 2.0 |
| Tenda | Ac10 Firmware | 16.03.10.13 |
| Tenda | Ac10 | 4.0 |
| Tenda | Ac8 Firmware | 16.03.34.06 |
| Tenda | Ac8 | 4.0 |
Related Weaknesses (CWE)
References
- https://github.com/JohenanLi/router_vuls/blob/main/websReadEvent/websReadEvent.mThird Party Advisory
- https://vuldb.com/?ctiid.281555Permissions RequiredVDB Entry
- https://vuldb.com/?id.281555Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.426417Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2024-10280?
CVE-2024-10280 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022. It has been rated as problematic. This issue affects the function websReadEvent of the ...
How severe is CVE-2024-10280?
CVE-2024-10280 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-10280?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac15 Firmware, Tenda Ac15, Tenda Ac7 Firmware, Tenda Ac7, Tenda Ac10U Firmware.