Stack-based Buffer Overflow in Tenda 4G300

CVE-2024-4166

What is CVE-2024-4166?

A critical vulnerability has been identified in the Tenda 4G300 router, specifically in the function sub_41E858 for version 1.01.42. This vulnerability allows attackers to manipulate the 'GO/page' argument, leading to a stack-based buffer overflow. Such exploitation can be initiated remotely, posing significant risks to network security and device integrity. Despite early notifications to Tenda regarding this security flaw, there has been no official response or mitigation from the vendor. It is crucial for users of Tenda products to be aware of this vulnerability and take necessary precautions to safeguard their devices.

References