Stack-based Buffer Overflow in Tenda FH1205 Router

CVE-2024-3011

What is CVE-2024-3011?

A stack-based buffer overflow vulnerability has been identified in the Tenda FH1205 router, specifically within the function formQuickIndex located in the file /goform/QuickIndex. This critical flaw allows attackers to manipulate the PPPOEPassword argument, which could lead to unauthorized remote code execution. Public disclosure of the exploit heightens the risk of active exploitation, underscoring the need for prompt remediation. Despite attempts to contact Tenda regarding this issue, the vendor has yet to respond to potential security concerns raised by the community.

References