Stack-Based Buffer Overflow in Tenda FH1201 Router
CVE-2024-41462

7.5HIGH

Key Information:

Vendor

Tenda
Status
Fh1201 Firmware
Vendor
CVE Published:
24 July 2024

What is CVE-2024-41462?

The Tenda FH1201 router version 1.2.0.14 has a vulnerability caused by a stack-based buffer overflow in the 'page' parameter within the ip/goform/DhcpListClient endpoint. This flaw can potentially be exploited to allow attackers to execute arbitrary code, leading to unauthorized access or manipulation of the device. Users are advised to apply security updates and monitor for any unusual activity as this vulnerability poses significant risks to network security and device integrity.

References

https://github.com/iotresearch/iot-vuln/blob/main/Tenda/F...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.