Stack-Based Buffer Overflow in Tenda W15E Product
CVE-2024-4118

8.8HIGH

Key Information:

Vendor

Tenda
Status
W15e Firmware
Vendor
CVE Published:
24 April 2024

What is CVE-2024-4118?

A critical vulnerability has been identified in the Tenda W15E router version 15.11.0.14, specifically affecting the functionality of the addIpMacBind feature within the /goform/addIpMacBind file. This vulnerability occurs due to improper handling of the IPMacBindRule argument, which can lead to a stack-based buffer overflow. Attackers can exploit this security flaw remotely, potentially compromising the device and gaining unauthorized access. Public disclosure of this vulnerability has raised awareness among potential attackers, making immediate mitigation measures essential for users of the affected device.

References

https://vuldb.com/?id.261861
https://vuldb.com/?ctiid.261861
https://vuldb.com/?submit.317823

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.