CVE-2024-12002

🗓️ 30 Nov 2024 13:00:14Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

A problematic vulnerability found in Tenda FH451, FH1201, FH1202, and FH1206 up to 20241129, allowing remote null pointer dereference via manipulation of Content-Length argument in websReadEvent function

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the websReadEvent() function in the microprogramming software for Tenda FH451, Tenda FH1201, Tenda FH1202, and Tenda FH1206 allows a hacker to trigger a service failure.	3 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-12002	30 Nov 202413:02	–	circl
CNNVD	Tenda多款产品安全漏洞	30 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-12002 Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference	30 Nov 202413:00	–	cvelist
EUVD	EUVD-2024-50526	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12002	30 Nov 202413:15	–	nvd
OSV	CVE-2024-12002	30 Nov 202413:15	–	osv
Positive Technologies	PT-2024-8941 · Tenda · Tenda Fh1202 +3	22 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12002	23 May 202506:46	–	redhatcve
Vulnrichment	CVE-2024-12002 Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference	30 Nov 202413:00	–	vulnrichment

NVD

Vulners

Node

tenda fh451_firmwareMatch1.0.0.5

tenda fh451_firmwareMatch1.0.0.7

tenda fh451_firmwareMatch1.0.0.9

AND

tenda fh451Match-

Node

tenda fh1201_firmwareMatch1.2.0.8(8155)

tenda fh1201_firmwareMatch1.2.0.14(408)_en

AND

tenda fh1201Match-

Node

tenda fh1202_firmwareMatch1.2.0.9

tenda fh1202_firmwareMatch1.2.0.14(408)

tenda fh1202_firmwareMatch1.2.0.14(408)_en

AND

tenda fh1202Match-

Node

tenda fh1206_firmwareMatch1.2.0.8(8155)

AND

tenda fh1206Match-

[
  {
    "vendor": "Tenda",
    "product": "FH451",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "FH1201",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "FH1202",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "FH1206",
    "versions": [
      {
        "version": "20241129",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Kalvin2077/tenda-fh-cve
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
Content-Length	header	/goform/GetIPTV	Null pointer dereference via Content-Length manipulation in GetIPTV, exploitable remotely.	CWE-476, CWE-404

17 Jun 2026 06:58Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.3 - 6.5

CVSS 24

CVSS 45.3

CVSS 34.3

EPSS0.00754

SSVC