CVE-2024-4291

A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule of the file /goform/setBlackRule. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262223. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md Broken Link
https://vuldb.com/?ctiid.262223 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.262223 Third Party Advisory VDB Entry
https://vuldb.com/?submit.320672 Third Party Advisory VDB Entry
https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md Broken Link
https://vuldb.com/?ctiid.262223 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.262223 Third Party Advisory VDB Entry
https://vuldb.com/?submit.320672 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:a301_firmware:15.03.08.12:*:*:*:*:*:*:*
cpe:2.3:h:tenda:a301:2.0:*:*:*:*:*:*:*

History

28 May 2025, 13:47

Type Values Removed Values Added
References () https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md - () https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md - Broken Link
References () https://vuldb.com/?ctiid.262223 - () https://vuldb.com/?ctiid.262223 - Permissions Required, Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.262223 - () https://vuldb.com/?id.262223 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.320672 - () https://vuldb.com/?submit.320672 - Third Party Advisory, VDB Entry
First Time Tenda
Tenda a301 Firmware
Tenda a301
CPE cpe:2.3:h:tenda:a301:2.0:*:*:*:*:*:*:*
cpe:2.3:o:tenda:a301_firmware:15.03.08.12:*:*:*:*:*:*:*
CWE CWE-787

21 Nov 2024, 09:42

Type Values Removed Values Added
References () https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md - () https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md -
References () https://vuldb.com/?ctiid.262223 - () https://vuldb.com/?ctiid.262223 -
References () https://vuldb.com/?id.262223 - () https://vuldb.com/?id.262223 -
References () https://vuldb.com/?submit.320672 - () https://vuldb.com/?submit.320672 -

14 May 2024, 15:43

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en Tenda A301 15.13.08.12_multi_TDE01. Ha sido calificada como crítica. Este problema afecta la función formAddMacfilterRule del archivo /goform/setBlackRule. La manipulación del argumento lista de dispositivos conduce a un desbordamiento de búfer en la región stack de la memoria. El ataque puede iniciarse de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador asociado de esta vulnerabilidad es VDB-262223. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.

27 Apr 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-27 20:15

Updated : 2025-05-28 13:47


NVD link : CVE-2024-4291

Mitre link : CVE-2024-4291

CVE.ORG link : CVE-2024-4291


JSON object : View

Products Affected

tenda

  • a301
  • a301_firmware
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write