CVE-2024-2991: falha de média gravidade em Tenda FH1203
Tenda FH1203 WriteFacMac formWriteFacMac command injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 7.6%
A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258160. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Tenda · FH1203CVEs relacionadas — Tenda FH1203
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2992HIGHTenda FH1203 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-2993HIGHTenda FH1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.6%CVE-2024-2989HIGHTenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.6%CVE-2024-2988HIGHTenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflowEPSS 1.6%CVE-2024-2994HIGHTenda FH1203 GetParentControlInfo stack-based overflowEPSS 1.5%CVE-2024-2990HIGHTenda FH1203 execCommand formexeCommand stack-based overflowEPSS 1.5%