Stack Overflow Vulnerability in Tenda FH1206 Routers

CVE-2024-42973

Summary

The Tenda FH1206 router version 02.03.01.35 is susceptible to a stack overflow vulnerability associated with the 'fromSetlpBind' function, which can be exploited by attackers. By sending a specially crafted POST request targeting the page parameter, an attacker can trigger potential Denial of Service conditions, disrupting the functionality of the affected device and causing service interruptions.

References