CVE-2024-42941

2024-08-1500:00:00

mitre

github.com

tenda fh1201

stack overflow

vulnerability

denial of service

crafted post request

AI Score

7.7

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14:*:*:*:*:*:*:*"
    ],
    "vendor": "tenda",
    "product": "fh1201_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0.14"
      }
    ],
    "defaultStatus": "unknown"
  }
]