Stack Overflow Vulnerability in FH1205 v2.0.0.7(775)
CVE-2024-30628

9.8CRITICAL

Key Information:

Vendor

Tenda
Status
Fh1205 Firmware
Vendor
CVE Published:
29 March 2024

What is CVE-2024-30628?

A stack overflow vulnerability exists in the Tenda FH1205 router within the 'fromAddressNat' function. By manipulating the 'page' parameter during input, an attacker could exploit this flaw to execute arbitrary code, potentially compromising the device and its network. This vulnerability underscores the importance of maintaining updated firmware and implementing robust network security practices.

References

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/T...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.