Exploit Report

Computer Security And Bug Information

CVE-2024-4291

CVECVE-2024-4291
CVE Title
Published Date2024-04-27T20:15Z
Modified Date2024-04-29T12:42Z
CWE TypeCWE-121
DescriptionA vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule of the file /goform/setBlackRule. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262223. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://vuldb.com/?id.262223
Reference Description VDB-262223 | Tenda A301 setBlackRule formAddMacfilterRule stack-based overflow
Reference URLhttps://vuldb.com/?ctiid.262223
Reference Description VDB-262223 | CTI Indicators (IOB, IOC, IOA)
Reference URLhttps://vuldb.com/?submit.320672
Reference Description Submit #320672 | Tenda A301 v2.0 US_A301V2.0RTL_V15.13.08.12_multi_TDE01 Buffer Overflow
Reference URLhttps://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md
Reference Description https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md
Sources NIST MITRE
Note
  • No CVSS data for this CVE

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles