Tenda i22 Buffer Overflow Vulnerability Ignored by Vendor

CVE-2024-7584

Summary

A serious buffer overflow vulnerability has been identified in the Tenda i22 product, specifically within the formApPortalPhoneAuth function found in the /goform/apPortalPhoneAuth file. This issue allows for remote manipulation of the argument data, potentially enabling attackers to execute exploits from a distance. The vulnerability was publicly disclosed, emphasizing the necessity for users to apply immediate security measures. Despite early notifications to Tenda regarding this vulnerability, there has been no response, raising concerns about the timeliness of their security updates and the overall safety of their user base.

References