Stack Overflow Vulnerability in Tenda FH1201 Router

CVE-2024-42953

Summary

The Tenda FH1201 router version 1.2.0.14 is susceptible to a stack overflow vulnerability specifically related to the PPW parameter in the fromWizardHandle function. By sending a specially crafted POST request, malicious actors can exploit this weakness to cause a Denial of Service (DoS), disrupting the normal operation of the device. This vulnerability poses significant risks to users, especially in IoT environments where routers serve as critical points of network connectivity.

References