Stack-based Buffer Overflow in Tenda i21 Router

CVE-2024-4251

What is CVE-2024-4251?

A critical vulnerability has been discovered in the Tenda i21 router, specifically in the 'fromDhcpSetSer' function within the '/goform/DhcpSetSe' URL endpoint. This flaw can be exploited through stack-based buffer overflow via manipulation of various DHCP parameters, including dhcpStartIp, dhcpEndIp, dhcpGw, dhcpMask, dhcpLeaseTime, dhcpDns1, and dhcpDns2. As attackers could exploit this vulnerability remotely, it poses a substantial threat to device security and user data integrity. Despite the disclosure of this vulnerability to the vendor, no response or remedy has been provided, underscoring the urgency for users to secure their devices against potential exploits. For further details, consult the VDB-262142 entry or related resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References