Stack-based Buffer Overflow Vulnerability in Tenda G3 Router

CVE-2024-4165

Summary

A severe stack-based buffer overflow vulnerability has been identified in the Tenda G3 router's modifyDhcpRule function within the /goform/modifyDhcpRule file. By manipulating the bindDhcpIndex argument, an attacker can exploit this vulnerability to execute arbitrary code remotely. This issue not only allows for unauthorized access to the affected device but could also enable the attacker to disrupt network services or gain control over the router. The vulnerability has been disclosed publicly, raising concerns about its potential exploitation in real-world scenarios. As a precaution, users are strongly advised to assess their devices for security updates and consider the implementation of additional protective measures.

References