Vulnerability in Tenda i22 1.0.0.3(4687) Could Lead to Remote Buffer Overflow

CVE-2024-7583

Summary

A buffer overflow vulnerability has been identified in the Tenda i22, specifically within the apPortalOneKeyAuth function. The flaw arises from improper handling of the argument data within the /goform/apPortalOneKeyAuth file, allowing attackers to exploit the vulnerability remotely. If successfully exploited, this can lead to potential unauthorized manipulation or access to the device. Despite efforts to notify the vendor regarding this serious issue, there has been no response, heightening the urgency for affected users to seek immediate remediation.

References