Stack-Based Buffer Overflow in Tenda 4G300

CVE-2024-4169

Summary

A significant vulnerability has been identified in the Tenda 4G300 router model 1.01.42, which is susceptible to a stack-based buffer overflow due to improper handling of input arguments in functions sub_42775C and sub_4279CC. This flaw allows an attacker to exploit the device remotely, leading to potential unauthorized access and execution of arbitrary code. Despite early disclosure attempts to inform Tenda about this critical issue, the company has not responded. It is highly recommended for users of the affected product to implement recommended security measures or consider upgrading their device to mitigate this risk. For further details, consult the technical descriptions available from VDB-261988 and related resources.

References