CVE-2024-4494 is a critical stack-based buffer overflow vulnerability found in Tenda i21 1.0.0.14(4656). Exploitation of the formSetUplinkInfo function via manipulation of the pingHostIp2 argument in /goform/setUplinkInfo allows for remote code execution. Given its SVRS score of 80, this vulnerability demands immediate attention and patching. Public exploit code is available, indicating active exploitation in the wild. The lack of vendor response exacerbates the risk. This vulnerability could allow attackers to gain full control of affected Tenda devices, making it a significant threat to network security. The high CVSS score of 8.8 further highlights the severity of this critical vulnerability.