CVE-2024-4123
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
A critical vulnerability, identified as CVE-2024-4123, has been discovered in Tenda W15E version 15.11.0.14. The vulnerability exists in the function formSetPortMapping of the file /goform/SetPortMapping and can be exploited through remote attacks. By manipulating certain arguments, such as portMappingServer and portMappingProtocol, a stack-based buffer overflow can occur. The exploit has been publicly disclosed and is potentially dangerous for organizations using the affected product. Despite being informed about the disclosure, the vendor did not respond. The vulnerability has a high base severity score of 8.8 and poses risks to confidentiality and integrity with an impact score of 5.9 out of 10 according to CVSS:3.1 metrics.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions