CVE-2024-4248

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.14(4656)

Description A critical issue affects the formQosManage user function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely.

Recommendations For Tenda i21 version 1.0.0.14(4656), as a temporary workaround, consider disabling the formQosManage user function until a patch is available. Restrict access to the ssidIndex argument in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.