CVE-2024-40412

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

Score

CVSS 3.1 6.8 Medium

Status

Analyzed - cve@mitre.org

Published

2024-07-10

Last modified

2024-08-02

Weaknesses

CWE-121

Affected products

• Ax12 (Tenda)
• Ax12 Firmware (Tenda)

References

• https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX12/1/README.md
• https://static.tenda.com.cn/tdcweb/download/uploadfile/AX12/V22.03.01.46.zip