CVE-2024-0538

A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-121
• CWE-787

• https://github.com/jylsec/vuldb/blob/main/Tenda/W9/3/README.mdBroken Link, Third Party Advisory
• https://vuldb.com/?ctiid.250708Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250708Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/jylsec/vuldb/blob/main/Tenda/W9/3/README.mdBroken Link, Third Party Advisory
• https://vuldb.com/?ctiid.250708Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250708Permissions Required, Third Party Advisory, VDB Entry

Published

Jan 15, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0532A vulnerability was found in Tenda A15 15.13.07.13. It has b…7.2
• CVE-2024-0533A vulnerability was found in Tenda A15 15.13.07.13. It has b…7.2
• CVE-2024-0534A vulnerability classified as critical has been found in Ten…7.2
• CVE-2024-0535A vulnerability classified as critical was found in Tenda PA…9.8
• CVE-2024-0536A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-0537A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-0539A vulnerability was found in Tenda W9 1.0.0.7(4456) and clas…9.8
• CVE-2024-0540A vulnerability was found in Tenda W9 1.0.0.7(4456). It has …9.8
• CVE-2024-0541A vulnerability was found in Tenda W9 1.0.0.7(4456). It has …9.8
• CVE-2024-0542A vulnerability was found in Tenda W9 1.0.0.7(4456). It has …9.8
• CVE-2024-0543A vulnerability classified as critical has been found in Cod…7.5
• CVE-2024-0545A vulnerability classified as problematic was found in CodeC…6.1