CVE-2024-3006

CVE-2024-3006 affects Tenda FH1205 (firmware 2.0.0.7(775)). The vulnerability is a stack-based overflow in the fromSetRouteStatic function (/goform/fromRouteStatic) triggered via the entrys argument, with remote exploitation and public disclosures. Connected sources confirm the root cause (stack-...