CVE-2024-46435

Summary

CVE-2024-46435 is a stack overflow vulnerability affecting the Tenda W18E V16.01.0.8(1625) web management portal. An authenticated remote attacker can exploit this flaw by supplying malicious input to the delFacebookPic function, leading to a denial of service or potentially executing arbitrary code. This vulnerability arises due to insufficient input validation in the portal, allowing attackers to manipulate the stack and inject malicious commands.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.