CVE-2024-4115

Summary

CVE-2024-4115 is a newly disclosed critical vulnerability affecting Tenda W15E routers running version 15.11.0.14. The issue lies within the formAddDnsForward function of the /goform/AddDnsForward file, where a stack-based buffer overflow can be triggered by manipulating the argument DnsForwardRule. This vulnerability allows for remote attacks and the exploit is now publicly available. Though the vendor was notified of the disclosure, they have yet to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.