CVE-2024-2981

CWE-121 — Stack-based Buffer Overflow CWE-787 — Out-of-bounds Write3 documents3 sources

Severity

8.8HIGH

EPSS

0.5%

top 34.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tenda Fh1202 Tenda Fh1202 Firmware

Timeline

PublishedMar 27

Description

A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258150 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did n…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5tenda/fh12021.2.0.14(408)

▶NVDtenda/fh1202_firmware1.2.0.14\(408\)

🔴Vulnerability Details

GHSA

GHSA-252r-cvww-g3vf: A vulnerability, which was classified as critical, was found in Tenda FH1202 1↗2024-03-27

▶

CVEList

Tenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow↗2024-03-27

▶