Stack Overflow Vulnerability in Tenda FH1206 Router
CVE-2024-42976

7.5HIGH

Key Information:

Vendor

Tenda
Status
Fh1206 Firmware
Vendor
CVE Published:
15 August 2024

What is CVE-2024-42976?

The Tenda FH1206 router has been identified to contain a significant stack overflow vulnerability due to improper handling of the page parameter in the fromSafeClientFilter function. An attacker can leverage this flaw by sending specially crafted POST requests, which can result in a Denial of Service (DoS) condition. This can disrupt network availability and impact the functionality of the affected device, making it critical for users and administrators to apply necessary security measures.

References

https://github.com/TTTJJJWWW/AHU-IoT-vulnerable/blob/main...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-42976 : Stack Overflow Vulnerability in Tenda FH1206 Router