CVE-2024-4020: fallo de gravedad alta en Tenda FH1206
Tenda FH1206 addressNat fromAddressNat buffer overflow
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.8epss 1.6%
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument entrys leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Tenda · FH1206CVEs relacionadas — Tenda FH1206
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-7615HIGHTenda FH1206 fromSafeUrlFilter stack-based overflowEPSS 1.5%CVE-2024-7614HIGHTenda FH1206 qossetting fromqossetting stack-based overflowEPSS 1.5%CVE-2024-7613HIGHTenda FH1206 GstDhcpSetSer fromGstDhcpSetSer buffer overflowEPSS 1.5%CVE-2024-7707HIGHTenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.3%CVE-2024-12002MEDIUMTenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereferenceEPSS 0.8%CVE-2025-14994HIGHTenda FH1201/FH1206 HTTP Request webtypelibrary strcat stack-based overflowEPSS 0.7%