Stack Overflow Vulnerability in Tenda FH1205 v2.0.0.7(775) Could Lead to Remote Code Execution
CVE-2024-30629

Currently unrated

Key Information:

Vendor
Tenda
Status
Fh1205 Firmware
Vendor
CVE Published:
29 March 2024

Summary

The Tenda FH1205 router version 2.0.0.7(775) contains a stack overflow vulnerability that arises from improper handling of the list1 parameter within the fromDhcpListClient function. This weakness can be exploited by attackers to execute arbitrary code or cause a denial of service, thereby endangering the integrity and availability of the affected network. Users of this product are advised to assess their exposure and apply necessary security measures to mitigate potential threats.

References

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/T...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.