CVE-2024-57483 Memory corruption in n/a
A buffer overflow in the Tenda i24 router allows attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-57483?
CVE-2024-57483 is a critical memory corruption vulnerability in n/a, published on 14 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
Weakness: CWE-120
Which versions are affected by CVE-2024-57483?
It affects 1 product.
Products include Tenda I24 Firmware.
How do I fix CVE-2024-57483?
No fix has been published for CVE-2024-57483 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-57483 being exploited?
There is no known exploitation of CVE-2024-57483 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2025-4007 Tenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflow
- CVE-2025-3802 Tenda W12/i24 httpd cgiPingSet stack-based overflow
- CVE-2025-3803 Tenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflow
- CVE-2025-3820 Tenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflow
- CVE-2025-70798 Hardcoded credentials in n/a
Sources
Also known as GHSA-pmh4-6w4w-36pv.