Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Tenda AX1806 Router Allows Remote Code Execution via IPTV Parameter

CVE-2024-44555 · published 2 years ago
Summary

A vulnerability in the Tenda AX1806 router's IPTV settings allows an attacker to potentially execute malicious code on the device. This could lead to unauthorized access to the router's settings or other connected devices. Update the router's firmware to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
tenda ax1806_firmware 1.0.0.1
cpe:2.3:o:tenda:ax1806_firmware:1.0.0.1:*:*:*:*:*:*:*
Original advisory text
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
CWE-120Classic Buffer Overflow
Timeline
Published26 Aug 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-44555 · NVD
Track software like this
Free during beta