CVE-2024-42940

2024-08-1500:00:00

mitre

github.com

tenda fh1201

stack overflow

vulnerability

denial of service

crafted post request

AI Score

7.7

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:tenda:fh1201_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "tenda",
    "product": "fh1201_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0.14\\(408\\)"
      }
    ],
    "defaultStatus": "unknown"
  }
]