Stack-Based Buffer Overflow in Tenda W15E Router

CVE-2024-4121

Summary

A critical stack-based buffer overflow vulnerability has been discovered in the Tenda W15E router running version 15.11.0.14, specifically within the formQOSRuleDel function. This vulnerability arises from improper handling of the qosIndex argument, allowing an attacker to exploit the flaw remotely. If successfully executed, this could lead to unauthorized access and potential control over the affected device. Despite early disclosure attempts, Tenda has not yet responded to this security concern, increasing the urgency for users to take preventative measures such as applying security updates and implementing enhanced network security protocols.

References