CVE-2024-4241

Summary

CVE-2024-4241 is a newly identified critical vulnerability affecting the Tenda W9 1.0.0.7(4456) firmware. The issue lies in the function formQosManageDouble_auto, where manipulation of the ssidIndex argument can lead to a stack-based buffer overflow. This vulnerability poses a significant risk as it can be exploited remotely. Vendors, including Tenda, have been notified but have yet to respond. The identifier for this issue is VDB-262132.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.