CVE-2024-10750 | Tenda i22 1.0.0.3(4687) SysToo websReadEvent Content-Length null pointer dereference

A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV?fgHPOST/goform/SysToo. The manipulation of the argument Content-Length leads to null pointer dereference.

This vulnerability is known as CVE-2024-10750. The attack can be launched remotely. Furthermore, there is an exploit available.