Stack Overflow Vulnerability in Tenda F1203 Router

CVE-2024-2976

What is CVE-2024-2976?

A critical vulnerability has been identified in the Tenda F1203 router, specifically in the function R7WebsSecurityHandler located in the /goform/execCommand file. This vulnerability allows attackers to perform a stack-based buffer overflow by manipulating password arguments. Given that this flaw can be exploited remotely, it poses serious security risks to users. The issue has been publicly disclosed, and no acknowledgment from the vendor has been received regarding this serious security threat. For more information, visit the detailed descriptions and technical insights available in relevant security databases.

References