CVE-2024-3877

🗓️ 16 Apr 2024 18:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Critical stack-based buffer overflow vulnerability in Tenda F1202 1.2.0.20(408) allows remote attackers to launch attacks via the fromqossetting function in /goform/fromqossetting. Exploit disclosed to the public, no vendor response

Reporter	Title	Published	Views	Family All 8
CNNVD	Tenda F1202 安全漏洞	16 Apr 202400:00	–	cnnvd
CNVD	Tenda F1202 fromqossetting function stack buffer overflow vulnerability	18 Apr 202400:00	–	cnvd
Cvelist	CVE-2024-3877 Tenda F1202 fromqossetting stack-based overflow	16 Apr 202418:31	–	cvelist
EUVD	EUVD-2024-32445	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3877	16 Apr 202419:15	–	nvd
OSV	CVE-2024-3877	16 Apr 202419:15	–	osv
RedhatCVE	CVE-2024-3877	5 Feb 202510:06	–	redhatcve
Vulnrichment	CVE-2024-3877 Tenda F1202 fromqossetting stack-based overflow	16 Apr 202418:31	–	vulnrichment

NVD

Node

tenda f1202_firmwareMatch1.2.0.20(408)

AND

tenda f1202Match-

[
  {
    "vendor": "Tenda",
    "product": "F1202",
    "versions": [
      {
        "version": "1.2.0.20(408)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/F/F1202/fromqossetting.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
qos	path	goform/fromqossetting	Stack-based buffer overflow in the fromqossetting QoS configuration endpoint allowing remote exploitation via the qos argument.	CWE-787, CWE-121

21 Jan 2025 16:34Current

7High risk

Vulners AI Score7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00473

SSVC