Stack Overflow Vulnerability in Tenda FH1201 Router

CVE-2024-42955

Summary

The Tenda FH1201 router version v1.2.0.14 is susceptible to a stack overflow vulnerability triggered by an improperly handled parameter in the fromSafeClientFilter function. By sending a specially crafted POST request, an attacker can exploit this vulnerability to initiate a Denial of Service (DoS) attack, disrupting the functionality of the device and potentially affecting users' network access. This highlights the need for prompt updates and security patches from Tenda to mitigate such threats.

References