CVE-2024-4496

A vulnerability was found in Tenda i21 1.0.0.14(4656). It has been classified as critical. This affects the function formWifiMacFilterSet. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263085 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Configurations

No configuration.

History

21 Nov 2024, 09:42

Type Values Removed Values Added
References () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/i/i21/formWifiMacFilterSet.md - () https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/i/i21/formWifiMacFilterSet.md -
References () https://vuldb.com/?ctiid.263085 - () https://vuldb.com/?ctiid.263085 -
References () https://vuldb.com/?id.263085 - () https://vuldb.com/?id.263085 -
References () https://vuldb.com/?submit.323606 - () https://vuldb.com/?submit.323606 -

14 May 2024, 15:43

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en Tenda i21 1.0.0.14(4656). Ha sido clasificado como crítico. Esto afecta a la función formWifiMacFilterSet. La manipulación del argumento ssidIndex provoca un desbordamiento de búfer en la región stack de la memoria. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-263085. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.

05 May 2024, 06:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-05 06:15

Updated : 2024-11-21 09:42


NVD link : CVE-2024-4496

Mitre link : CVE-2024-4496

CVE.ORG link : CVE-2024-4496


JSON object : View

Products Affected

No product.

CWE
CWE-121

Stack-based Buffer Overflow