CVE-2024-12002CWE-404CWE-476

Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference

Medium · published November 30, 2024

CVSS v4.0
5.3
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00804 · 56.3th percentile
Weaknesses
CWE-404 · Improper Resource Shutdown or Release; CWE-476 · NULL Pointer Dereference
Published
2024-11-30T13:00Z
EPSS history
Timeline
  • 30 NOV 13:00Z
    Tenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereference
    cvelistv5