CVE-2024-2994: falha de alta gravidade em Tenda FH1203
Tenda FH1203 GetParentControlInfo stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 1.5%
A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258163. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Tenda · FH1203CVEs relacionadas — Tenda FH1203
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2991MEDIUMTenda FH1203 WriteFacMac formWriteFacMac command injectionEPSS 7.6%CVE-2024-2992HIGHTenda FH1203 setcfm formSetCfm stack-based overflowEPSS 1.7%CVE-2024-2993HIGHTenda FH1203 QuickIndex formQuickIndex stack-based overflowEPSS 1.6%CVE-2024-2989HIGHTenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.6%CVE-2024-2988HIGHTenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflowEPSS 1.6%CVE-2024-2990HIGHTenda FH1203 execCommand formexeCommand stack-based overflowEPSS 1.5%