CVE-2024-2546 is a high severity (CVSS 8.8) stack-based buffer overflow in the Tenda AC18 router, firmware 15.13.07.09. The fromSetWirelessRepeat function overflows a stack buffer through the wpapsk_crypto5g argument. The record says it can be attacked remotely but lists no fixed firmware, so check Tenda's support page.
What's affected
Tenda AC18 firmware 15.13.07.09, as listed in the record's CPE data. The vulnerable function is fromSetWirelessRepeat, reached through the wpapsk_crypto5g argument. The record does not say whether other firmware builds share the code, so treat neighbouring versions as unconfirmed rather than safe.
The NVD record scores it 8.8 (high) with the vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, published 2024-03-17. The weakness is classed as CWE-121 (stack-based buffer overflow) and CWE-787 (out-of-bounds write).
The record names no fixed version and I found no vendor advisory in its references. The vendor was contacted early and did not respond, according to the record, so assume no patch exists until you confirm otherwise. Check Tenda's support downloads for your hardware revision and compare the firmware number to 15.13.07.09.
How to check if you're exposed
Sign in to the router's admin page and read the firmware version on the status or system page. If it reads 15.13.07.09, you are on the affected build. There is no package manager involved, so there is nothing to run on a workstation.
If you manage many devices, keep a list of router models and firmware versions, and check whether the web management interface answers from the internet. Run this only against addresses you own:
nmap -p 80,443,8080 YOUR_PUBLIC_ADDRESS
What to do now
- Check the firmware version on each affected router and write it down.
- Look on Tenda's support site for newer firmware for your hardware revision and install it if one exists. The record does not confirm one.
- Turn off remote management from the WAN side and restrict the admin page to a trusted management network.
- Replace any default admin password and keep guest and IoT devices away from the management interface.
- If the model is end of life or no fix ships, plan a replacement and treat the device as untrusted until then.
Why it matters
The weakness is a stack-based buffer overflow. The named handler copies a value from the request into a fixed-size buffer on the stack without checking its length first. Data past the end of that buffer overwrites neighbouring memory, which can crash the web service or, in the worst case, let an attacker influence what the device executes.
Router firmware makes this class common. The web management service is written in C, runs with high privileges, and is rarely rebuilt with modern memory protections. The CVSS vector above reads low complexity and network reachable, with low privileges required. In practice the question for you is whether the management interface can be reached by anyone you do not trust, from the LAN, from a guest network or from the internet.
This CVE is not on the CISA Known Exploited Vulnerabilities list (the record's KEV flag is false). Exploit details are not repeated here, because this guide is about defence.
Safeguard's free in-browser dependency scan at gold.safeguard.sh/scan lists the open source packages in a project and flags known vulnerabilities, and the Gold directory tracks this CVE. Reachability analysis helps decide which findings in your own code actually matter.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Is there a patched firmware for CVE-2024-2546?
The record does not name one, and it says the vendor did not respond to the researcher. Check Tenda's support downloads before relying on any answer.
Sources
Last reviewed: 19 October 2026.
