CVE-2024-2980

CWE-121 — Stack-based Buffer Overflow CWE-787 — Out-of-bounds Write3 documents3 sources

Severity

8.8HIGH

EPSS

0.5%

top 34.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tenda Fh1202 Tenda Fh1202 Firmware

Timeline

PublishedMar 27

Description

A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258149 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5tenda/fh12021.2.0.14(408)

▶NVDtenda/fh1202_firmware1.2.0.14\(408\)

🔴Vulnerability Details

CVEList

Tenda FH1202 execCommand formexeCommand stack-based overflow↗2024-03-27

▶

GHSA

GHSA-9p7q-wmmc-3rgf: A vulnerability, which was classified as critical, has been found in Tenda FH1202 1↗2024-03-27

▶