CVE-2024-42948

2024-08-1500:00:00

mitre

github.com

tenda fh1201

stack overflow

denial of service

crafted post request

AI Score

7.7

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:tenda:fh1201_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "tenda",
    "product": "fh1201_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0.14\\(408\\)"
      }
    ],
    "defaultStatus": "unknown"
  }
]