CVE-2024-4494

CVE-2024-4494 affects Tenda i21 firmware version 1.0.0.14(4656). The vulnerability is a stack-based overflow in the function formSetUplinkInfo within the file /goform/setUplinkInfo , triggered by improper handling of the argument pingHostIp2 . Attack is network-based and can be executed remotely;...