Stack-based Buffer Overflow in Tenda FH1201 Router

CVE-2024-41465

Summary

The Tenda FH1201 router, specifically version v1.2.0.14, is susceptible to a stack-based buffer overflow due to improper handling of the funcpara1 parameter during interaction with the ip/goform/setcfm endpoint. Exploiting this vulnerability potentially allows an attacker to execute arbitrary code, affecting the integrity and availability of the device. Network environments utilizing this router should assess their security posture and implement necessary mitigations to safeguard against potential exploitation.

References