CVE-2024-4247

Summary

CVE-2024-4247 is a critical vulnerability affecting Tenda i21 version 1.0.0.14(4656). This issue lies within the function formQosManage_auto, allowing an attacker to induce a stack-based buffer overflow by manipulating the ssidIndex argument. Remotely exploited, this vulnerability poses a significant threat. VDB-262138 identifies this issue, and regrettably, the vendor did not respond to earlier disclosure efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.