CVE-2024-42950

2024-08-1500:00:00

mitre

github.com

tenda fh1201

stack overflow

denial of service

AI Score

7.5

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:tenda:fh1201_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "tenda",
    "product": "fh1201_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "v1.2.0.14\\/408\\/"
      }
    ],
    "defaultStatus": "unknown"
  }
]