Stack Overflow Vulnerability in Tenda FH1201 Router
CVE-2024-42955

7.5HIGH

Key Information:

Vendor

Tenda
Status
Fh1201 Firmware
Vendor
CVE Published:
15 August 2024

What is CVE-2024-42955?

The Tenda FH1201 router version v1.2.0.14 is susceptible to a stack overflow vulnerability triggered by an improperly handled parameter in the fromSafeClientFilter function. By sending a specially crafted POST request, an attacker can exploit this vulnerability to initiate a Denial of Service (DoS) attack, disrupting the functionality of the device and potentially affecting users' network access. This highlights the need for prompt updates and security patches from Tenda to mitigate such threats.

References

https://github.com/TTTJJJWWW/AHU-IoT-vulnerable/blob/main...
ExploitThird Party Advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.