CVE-2024-51314
A stack overflow flaw exists in the Tenda TX9 V22.03.02.20 firmware’s /goform/setMacFilterCfg endpoint. The vulnerability, CVE‑2024‑51314, can be triggered over the network and may allow an attacker to crash the device or execute arbitrary code.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Tenda TX9 routers running firmware version V22.03.02.20.
Real-world impact
An attacker could cause the router to crash, leading to a denial of service for all devices on the network. In some cases, the overflow could be leveraged to run arbitrary code, potentially giving the attacker control over the device.
Why this severity
The CVSS score of 9.8 reflects that the flaw is network‑accessible, requires no special privileges or user interaction, and compromises confidentiality, integrity, and availability of the affected system.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources