Stack Overflow Vulnerability in Tenda FH1205 v2.0.0.7(775) Could Lead to Remote Code Execution
CVE-2024-30629

5.7MEDIUM

Key Information:

Vendor

Tenda
Status
Fh1205 Firmware
Vendor
CVE Published:
29 March 2024

What is CVE-2024-30629?

The Tenda FH1205 router version 2.0.0.7(775) contains a stack overflow vulnerability that arises from improper handling of the list1 parameter within the fromDhcpListClient function. This weakness can be exploited by attackers to execute arbitrary code or cause a denial of service, thereby endangering the integrity and availability of the affected network. Users of this product are advised to assess their exposure and apply necessary security measures to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/T...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.