CVE-2024-4168

Name of the Vulnerable Software and Affected Versions Tenda 4G300 version 1.01.42

Description A critical issue affects the function sub 4260F0. The manipulation of the argument upfilen leads to a stack-based buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations For Tenda 4G300 version 1.01.42, as a temporary workaround, consider disabling the function sub 4260F0 until a patch is available. Restrict access to the argument upfilen to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.