CVE-2024-40515
Published: 16 July 2024
Summary
CVE-2024-40515 is a critical-severity Improper Verification of Source of a Communication Channel (CWE-940) vulnerability in Tenda Ax2 Pro Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 8.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-40515 affects the Tenda AX2pro router running firmware version V16.03.29.48_cn from SHENZHEN TENDA TECHNOLOGY CO.,LTD. The flaw permits remote arbitrary code execution through the device's Routing functionality and carries a CVSS 3.1 score of 9.8 with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, corresponding to CWE-940.
An unauthenticated attacker with network access can send crafted requests to the Routing component and execute arbitrary code on the device, resulting in full compromise of confidentiality, integrity, and availability without any user interaction.
The current and peak EPSS scores are both 0.0657, indicating moderate but stable exploitation probability since disclosure. Public references consist of technical gist postings that demonstrate the issue but contain no vendor advisory or patch information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-38495
Vulnerability details
An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Enforces verification of the source of a communication channel by requiring identification and authentication of services first.
Requires explicit verification of the source and integrity of the channel used for authentication and other security functions.
Provides the means to verify the source of name-resolution responses instead of relying on unauthenticated channels.
Requires explicit verification of the communication source, blocking session hijacking via spoofed or alternate channels.