CVE-2024-12002

🗓️ 30 Nov 2024 13:00:14Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

A problematic vulnerability found in Tenda FH451, FH1201, FH1202, and FH1206 up to 20241129, allowing remote null pointer dereference via manipulation of Content-Length argument in websReadEvent function

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-12002	30 Nov 202413:02	–	circl
CNNVD	Tenda多款产品安全漏洞	30 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-12002 Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference	30 Nov 202413:00	–	cvelist
EUVD	EUVD-2024-50526	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12002	30 Nov 202413:15	–	nvd
OSV	CVE-2024-12002	30 Nov 202413:15	–	osv
Positive Technologies	PT-2024-8941 · Tenda · Tenda Fh1202 +3	22 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12002	23 May 202506:46	–	redhatcve
Vulnrichment	CVE-2024-12002 Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference	30 Nov 202413:00	–	vulnrichment

NVD

Vulners

Node

tenda fh451_firmwareMatch1.0.0.5

tenda fh451_firmwareMatch1.0.0.7

tenda fh451_firmwareMatch1.0.0.9

AND

tenda fh451Match-

Node

tenda fh1201_firmwareMatch1.2.0.8(8155)

tenda fh1201_firmwareMatch1.2.0.14(408)_en

AND

tenda fh1201Match-

Node

tenda fh1202_firmwareMatch1.2.0.9

tenda fh1202_firmwareMatch1.2.0.14(408)

tenda fh1202_firmwareMatch1.2.0.14(408)_en

AND

tenda fh1202Match-

Node

tenda fh1206_firmwareMatch1.2.0.8(8155)

AND

tenda fh1206Match-

[
  {
    "vendor": "Tenda",
    "product": "FH451",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "FH1201",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "FH1202",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "FH1206",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/Kalvin2077/tenda-fh-cve
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
Content-Length	header	/goform/GetIPTV	Content-Length manipulation causing null pointer dereference in GetIPTV function (remote exploit).	CWE-476, CWE-404

10 Dec 2024 23:21Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.3 - 6.5

CVSS 24

CVSS 45.3

CVSS 34.3

EPSS0.00115

SSVC