CVE-2024-4066

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261792. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

VendorProductVersions
TendaAC816.03.34.09
tendaac8_firmware16.03.34.06

References

Timeline

Published
Apr 23, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-406607.8In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the codCVE-2024-406617.8In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permisCVE-2024-406627.8In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local esCVE-2024-406646.2In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logiCVE-2024-406698.4In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additionCVE-2024-40675.3The NPM package `micromatch` prior to 4.0.8 is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability occurs in `micrCVE-2024-406708.4In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additionCVE-2024-406717.8In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission cheCVE-2024-406728.4In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This couCVE-2024-406736.5In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to impCVE-2024-406745.3In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the cCVE-2024-406757.5In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of s
CVE-2024-4066: High severity, CVSS 8.8 | Vulnix