Stack-Based Buffer Overflow in Tenda W15E Devices

CVE-2024-4115

What is CVE-2024-4115?

A severe stack-based buffer overflow vulnerability has been discovered in the Tenda W15E router, specifically in the function 'formAddDnsForward' within the '/goform/AddDnsForward' file. This flaw allows attackers to manipulate the 'DnsForwardRule' argument, potentially leading to remote exploitation. The risk is heightened as the vulnerability has been publicly disclosed, making affected systems particularly vulnerable to attacks. Tenda has been made aware of this issue but has yet to respond, raising concerns about the immediate need for users to secure their devices.

References