Tenda FH1203 WriteFacMac formWriteFacMac command injection

CVE-2024-2991

What is CVE-2024-2991?

A command injection vulnerability exists in the Tenda FH1203 router, specifically in the formWriteFacMac function. This vulnerability allows an attacker to manipulate the MAC address input, leading to unauthorized command execution on the device. The vulnerability can be exploited remotely, posing significant security risks. Although the vendor has been informed about this flaw, there has been no response. This oversight increases the urgency for users to secure their devices against potential exploits.

References