CVE-2024-4122
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-4122: A critical buffer overflow vulnerability has been identified in the Tenda W15E 15.11.0.14 firmware. The affected function, formSetDebugCfg in the /goform/setDebugCfg file, is susceptible to stack-based manipulation via the enable, level, and module arguments. An attacker can exploit this remotely, leading to potential code injection and unauthorized access. The exploit for this vulnerability, assigned identifier VDB-261865, has been publicly disclosed, increasing the risk for potential attacks. Unfortunately, the vendor did not respond to early disclosure attempts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Automation Anywhere, Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions