CVE-2024-4122

Summary

CVE-2024-4122: A critical buffer overflow vulnerability has been identified in the Tenda W15E 15.11.0.14 firmware. The affected function, formSetDebugCfg in the /goform/setDebugCfg file, is susceptible to stack-based manipulation via the enable, level, and module arguments. An attacker can exploit this remotely, leading to potential code injection and unauthorized access. The exploit for this vulnerability, assigned identifier VDB-261865, has been publicly disclosed, increasing the risk for potential attacks. Unfortunately, the vendor did not respond to early disclosure attempts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.