Stack Overflow Vulnerability in Tenda FH1201 Router

CVE-2024-42943

Summary

The Tenda FH1201 version 1.2.0.14 is subject to a significant security flaw involving a stack overflow triggered by the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows an attacker to exploit the system by sending specially crafted POST requests, potentially leading to a Denial of Service (DoS). Users of this router should take immediate action to assess and remediate this vulnerability.

References