CVE-2024-4111

A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub_42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261854 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-121
• CWE-787

• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/TX9/SetLEDCfg.mdBroken Link
• https://vuldb.com/?ctiid.261854Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.261854Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.317205Third Party Advisory, VDB Entry
• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/TX9/SetLEDCfg.mdBroken Link
• https://vuldb.com/?ctiid.261854Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.261854Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.317205Third Party Advisory, VDB Entry

Published

Apr 24, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41096In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-41097In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41098In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-41107The CloudStack SAML authentication (disabled by default) doe…8.1
• CVE-2024-41108FOG is a free open-source cloning/imaging/rescue suite/inven…5.9
• CVE-2024-41109Pimcore's Admin Classic Bundle provides a backend user inter…6.5
• CVE-2024-41110Moby is an open-source project created by Docker for softwar…9.9
• CVE-2024-41111Sliver is an open source cross-platform adversary emulation/…7.2
• CVE-2024-41112streamlit-geospatial is a streamlit multipage app for geospa…9.8
• CVE-2024-41113streamlit-geospatial is a streamlit multipage app for geospa…9.8
• CVE-2024-41114streamlit-geospatial is a streamlit multipage app for geospa…9.8
• CVE-2024-41115streamlit-geospatial is a streamlit multipage app for geospa…9.8