Stack Overflow Vulnerability in Tenda FH1201 Router
CVE-2024-42953

7.5HIGH

Key Information:

Vendor

Tenda
Status
Fh1201 Firmware
Vendor
CVE Published:
15 August 2024

What is CVE-2024-42953?

The Tenda FH1201 router version 1.2.0.14 is susceptible to a stack overflow vulnerability specifically related to the PPW parameter in the fromWizardHandle function. By sending a specially crafted POST request, malicious actors can exploit this weakness to cause a Denial of Service (DoS), disrupting the normal operation of the device. This vulnerability poses significant risks to users, especially in IoT environments where routers serve as critical points of network connectivity.

References

https://github.com/TTTJJJWWW/AHU-IoT-vulnerable/blob/main...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.