CVE-2024-4166

Summary

CVE-2024-4166 is a critical vulnerability that affects Tenda 4G300 version 1.01.42. This issue is linked to the function sub_41E858, where a stack-based buffer overflow can be triggered due to manipulation of the GO/page argument. The vulnerability is remotely exploitable, and no response has been received from the vendor despite early disclosure. An identifier, VDB-261985, has been assigned to this security flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.