CVE-2024-34946 — Stack-based Buffer Overflow in Fh1206 Firmware

CWE-121 — Stack-based Buffer Overflow3 documents3 sources

Severity

6.5MEDIUMNVD

EPSS

0.4%

top 40.77%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tenda Fh1206 Firmware

Timeline

PublishedMay 14

Description

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDtenda/fh1206_firmware1.2.0.8\(8155\)_en

🔴Vulnerability Details

GHSA

GHSA-f7gp-8jp4-wwj5: Tenda FH1206 V1↗2024-05-14

▶

CVEList

CVE-2024-34946: Tenda FH1206 V1↗2024-05-10

▶