CVE-2024-4020: high-severity vulnerability in Tenda FH1206
Tenda FH1206 addressNat fromAddressNat buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 1.6%
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument entrys leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Tenda · FH1206Related CVEs — Tenda FH1206
In the same product, most dangerous first.
CVE-2024-7615HIGHTenda FH1206 fromSafeUrlFilter stack-based overflowEPSS 1.5%CVE-2024-7614HIGHTenda FH1206 qossetting fromqossetting stack-based overflowEPSS 1.5%CVE-2024-7613HIGHTenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 1.5%CVE-2024-7707HIGHTenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.3%CVE-2024-12002MEDIUMTenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereferenceEPSS 0.8%CVE-2025-14994HIGHTenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflowEPSS 0.7%