Stack-Based Buffer Overflow in Tenda FH1201 Router

CVE-2024-41461

Summary

The Tenda FH1201 router version v1.2.0.14 is vulnerable to a stack-based buffer overflow, which can be triggered by the list1 parameter at the ip/goform/DhcpListClient endpoint. This vulnerability may allow an attacker to execute arbitrary code, potentially compromising the integrity and availability of the affected device. Organizations relying on this IoT device should monitor for potential exploitation and apply necessary mitigations to secure their networks.

References