CVE-2024-0533 is a critical stack-based buffer overflow vulnerability in Tenda A15 router firmware. The flaw allows remote attackers to execute arbitrary code by manipulating the 'devName' argument in the /goform/SetOnlineDevName endpoint of the Web-based Management Interface.

While the CVSS score is 7.2, the SOCRadar Vulnerability Risk Score (SVRS) is 66, indicating a moderate risk, though still warranting attention. Successful exploitation of CVE-2024-0533 can lead to complete system compromise, potentially enabling attackers to gain control of the device and the network it serves. This remote code execution vulnerability has a publicly available exploit, increasing the likelihood of attacks. The lack of vendor response further exacerbates the risk. Organizations using affected Tenda A15 routers should consider implementing mitigations such as disabling remote management or implementing access control lists. The vulnerability lies in insufficient input validation.