CVE-2024-57575
Published: 16 January 2025
Summary
CVE-2024-57575 is a critical-severity Out-of-bounds Write (CWE-787) vulnerability in Tenda Ac18 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 37.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents stack overflow by validating the length and format of the ssid parameter in the form_fast_setting_wifi_set function.
Implements memory protections such as stack canaries and non-executable stacks to block control flow hijacking from the stack overflow.
Mandates identification, reporting, and patching of the specific stack overflow flaw to eliminate the vulnerability.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack overflow in the router's web management interface (form_fast_setting_wifi_set via ssid parameter) enables remote code execution on a public-facing application.
NVD Description
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
Deeper analysisAI
CVE-2024-57575 is a stack overflow vulnerability (CWE-787) affecting the Tenda AC18 router in version V15.03.05.19. The flaw occurs in the form_fast_setting_wifi_set function when processing a specially crafted ssid parameter, which can overwrite the stack buffer and lead to unintended control flow hijacking.
The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is exploitable remotely over the network with low attack complexity, no required privileges or user interaction, and unchanged impact scope. Unauthenticated attackers can send malformed requests to the vulnerable endpoint, potentially achieving remote code execution with high impacts on confidentiality, integrity, and availability.
Mitigation details are available in the referenced advisory at https://github.com/qijiale/Tenda/blob/main/1/Readme.md, published on 2025-01-16.
Details
- CWE(s)