CVE-2024-4123: Tenda W15E SetPortMapping formSetPortMapping stack-based overflow
First published: Wed Apr 24 2024(Updated: )
A vulnerability, which was classified as critical, has been found in Tenda W15E 15.11.0.14. Affected by this issue is the function formSetPortMapping of the file /goform/SetPortMapping. The manipulation of the argument portMappingServer/portMappingProtocol/portMappingWan/porMappingtInternal/portMappingExternal leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261866 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Tenda W15e Firmware | =15.11.0.14 | |
| Tenda W15E |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4123?
CVE-2024-4123 is classified as a critical vulnerability.
What is affected by CVE-2024-4123?
CVE-2024-4123 affects the Tenda W15E router running firmware version 15.11.0.14.
How do I fix CVE-2024-4123?
To fix CVE-2024-4123, update the Tenda W15E firmware to the latest version provided by the manufacturer.
What is the nature of the vulnerability in CVE-2024-4123?
The vulnerability in CVE-2024-4123 is related to improper handling of the formSetPortMapping function.
Is my device vulnerable if it is not running Tenda W15E firmware 15.11.0.14?
Devices that are not using Tenda W15E firmware version 15.11.0.14 are not affected by CVE-2024-4123.
- agent/title
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/author
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/tenda
- canonical/tenda w15e firmware
- version/tenda w15e firmware/15.11.0.14
- canonical/tenda w15e