Stack Overflow Vulnerability in Tenda FH1206 Router
CVE-2024-42984

7.5HIGH

Key Information:

Vendor

Tenda
Status
Fh1206 Firmware
Vendor
CVE Published:
15 August 2024

What is CVE-2024-42984?

The Tenda FH1206 router version 02.03.01.35 is susceptible to a stack overflow vulnerability through the page parameter in the fromP2pListFilter function. This vulnerability can be exploited by attackers to execute a Denial of Service (DoS) attack by sending specially crafted POST requests. Such an exploitation can lead to service disruptions, impacting users' access to network resources and potentially allowing further malicious activities.

References

https://github.com/TTTJJJWWW/AHU-IoT-vulnerable/blob/main...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.