CVE-2024-4123: Tenda W15E SetPortMapping formSetPortMapping stack-based overflow
A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function formSetPortMapping of the file /goform/SetPortMapping. The manipulation of the argument portMappingServer/portMappingProtocol/portMappingWan/porMappingtInternal/portMappingExternal leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261866 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4123?
CVE-2024-4123 is classified as a critical vulnerability.
What is affected by CVE-2024-4123?
CVE-2024-4123 affects the Tenda W15E router running firmware version 15.11.0.14.
How do I fix CVE-2024-4123?
To fix CVE-2024-4123, update the Tenda W15E firmware to the latest version provided by the manufacturer.
What is the nature of the vulnerability in CVE-2024-4123?
The vulnerability in CVE-2024-4123 is related to improper handling of the formSetPortMapping function.
Is my device vulnerable if it is not running Tenda W15E firmware 15.11.0.14?
Devices that are not using Tenda W15E firmware version 15.11.0.14 are not affected by CVE-2024-4123.