What’s Vulnerable › Vulnerabilities

CVE-2024-40412

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-10 · updated 2026-06-17
• Weakness: CWE-121

Description

Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.

Affected products

• Tenda Ax12 Firmware: 22.03.01.46

References

• https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX12/1/README.md
• https://static.tenda.com.cn/tdcweb/download/uploadfile/AX12/V22.03.01.46.zip
• https://github.com/Feng-ZZ-pwn/IOT/blob/main/Tenda%20AX12/1/README.md
• https://static.tenda.com.cn/tdcweb/download/uploadfile/AX12/V22.03.01.46.zip

Get alerted when CVE-2024-40412 or the next vulnerability affects your stack