CVE-2024-2990: fallo de gravedad alta en Tenda FH1203
Tenda FH1203 execCommand formexeCommand stack-based overflow
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.8epss 1.5%
A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258159. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Tenda · FH1203CVEs relacionadas — Tenda FH1203
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-2991MEDIUMTenda FH1203 WriteFacMac formWriteFacMac command injectionEPSS 7.6%CVE-2024-2992HIGHTenda FH1203 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-2993HIGHTenda FH1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.6%CVE-2024-2989HIGHTenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.6%CVE-2024-2988HIGHTenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflowEPSS 1.6%CVE-2024-2994HIGHTenda FH1203 GetParentControlInfo stack-based overflowEPSS 1.5%