Lucene search

K
nvd[email protected]NVD:CVE-2024-42969
HistoryAug 15, 2024 - 5:15 p.m.

CVE-2024-42969

2024-08-1517:15:20
CWE-400
CWE-787
web.nvd.nist.gov
5
tenda fh1206
stack overflow
fromsafeurlfilter
dos
crafted post request
cve-2024-42969

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected configurations

Nvd
Node
tendafh1206_firmwareMatchv02.03.01.35
AND
tendafh1206Match-
VendorProductVersionCPE
tendafh1206_firmwarev02.03.01.35cpe:2.3:o:tenda:fh1206_firmware:v02.03.01.35:*:*:*:*:*:*:*
tendafh1206-cpe:2.3:h:tenda:fh1206:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

Related for NVD:CVE-2024-42969