Stack-based Buffer Overflow in Tenda FH1202 Router

CVE-2024-2984

What is CVE-2024-2984?

A stack-based buffer overflow vulnerability has been identified in the Tenda FH1202 router, specifically in the 'formSetCfm' function of the '/goform/setcfm' file. This flaw allows for manipulation of the 'funcpara1' argument, potentially enabling attackers to execute arbitrary code remotely. The vulnerability has been publicly disclosed, raising concerns about its exploitation. As a precautionary measure, users of the Tenda FH1202 router should apply necessary security updates and consider implementing further protective measures.

References