CVE-2024-4291

Summary

CVE-2024-4291 is a critical vulnerability affecting the Tenda A301 15.13.08.12_multi_TDE01 device. The issue lies in the function formAddMacfilterRule of the file /goform/setBlackRule. Manipulation of the argument deviceList results in a stack-based buffer overflow, potentially enabling remote attackers to exploit this vulnerability, which has been publicly disclosed. The associated identifier for this vulnerability is VDB-262222. Unfortunately, the vendor was not responsive when notified of this disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.