Buffer Overflow Vulnerability in Tenda i22 Router

CVE-2024-4252

Summary

A serious stack-based buffer overflow vulnerability has been identified in the Tenda i22 router's formSetUrlFilterRule function. This vulnerability allows remote attackers to manipulate the groupIndex argument, potentially leading to system instability or malicious code execution. Users of the affected version, 1.0.0.3(4687), are urged to implement appropriate security measures and monitor for any suspicious activities. Despite early contact with Tenda regarding this vulnerability, the vendor has not provided a response or patch, highlighting the need for immediate user action. For detailed indicators of compromise and further technical insights, refer to the comprehensive resources linked below.

References