CVE-2024-4164

Summary

CVE-2024-4164 is a critical vulnerability affecting Tenda G3 devices running firmware version 15.11.0.17(9502). This issue lies in the function formModifyPppAuthWhiteMac of the file /goform/ModifyPppAuthWhiteMac. A buffer overflow occurs due to the manipulation of the argument pppoeServerWhiteMacIndex, leading to potential stack corruption. The attack can be initiated remotely, making this vulnerability a significant security risk. The exploit has been disclosed to the public, increasing the likelihood of exploitation. The associated identifier for this vulnerability is VDB-261983. Regrettably, the vendor did not respond to early disclosure efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.