CVE-2024-46628

Summary

CVE-2024-46628 is a newly disclosed remote code execution (RCE) vulnerability affecting the Tenda G3 Router with firmware version v15.03.05.05. The issue is located in the formSetUSBPartitionUmount function, which can be exploited through the usbPartitionName parameter. An attacker can inject malicious code, potentially taking full control of the affected device. Successful exploitation could lead to unauthorized access, data theft, or even a complete system takeover. Users are urged to update their router firmware as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.