CVE-2024-2901

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedEndTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257944. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-121
• CWE-787

• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/setSchedWifi.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.257944Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.257944Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.300367Third Party Advisory, VDB Entry
• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC7/v1/setSchedWifi.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.257944Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.257944Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.300367Third Party Advisory, VDB Entry

Published

Mar 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29003The SolarWinds Platform was susceptible to a XSS vulnerabili…4.8
• CVE-2024-29004The SolarWinds Platform was determined to be affected by a s…4.3
• CVE-2024-29006By default the CloudStack management server honours the x-fo…9.8
• CVE-2024-29007The CloudStack management server and secondary storage VM co…7.3
• CVE-2024-29008A problem has been identified in the CloudStack additional V…6.4
• CVE-2024-29009Cross-site request forgery (CSRF) vulnerability in easy-popu…6.1
• CVE-2024-29010The XML document processed in the GMS ECM URL endpoint is vu…7.1
• CVE-2024-29011Use of hard-coded password in the GMS ECM endpoint leading t…7.5
• CVE-2024-29012Stack-based buffer overflow vulnerability in the SonicOS HTT…7.5
• CVE-2024-29013Heap-based buffer overflow vulnerability in the SonicOS SSL-…6.5
• CVE-2024-29014Vulnerability in SonicWall SMA100 NetExtender Windows (32 an…8.8
• CVE-2024-29015Uncontrolled search path in some Intel(R) VTune(TM) Profiler…7.8