Stack Overflow Vulnerability in Tenda FH1206 Router

CVE-2024-42968

Summary

The Tenda FH1206 router, specifically version v02.03.01.35, has a vulnerability that stems from a stack overflow issue within the fromSafeUrlFilter function when processing the Go parameter. This flaw can be exploited by attackers who send specially crafted POST requests, which may lead to a Denial of Service condition. Users of the Tenda FH1206 should apply necessary security measures to mitigate potential risks associated with this vulnerability.

References