CVE-2024-30584

Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function

Critical · published March 28, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

🔥 A sneaky stack overflow is waiting for you in Tenda's FH1202 version 1.2.0.14(408), and it could spell disaster for your network! Think of it like a crowded elevator where too many people try to squeeze in at once, causing it to behave unpredictably – in this case, potentially crashing your entire system! If exploited, an attacker could manipulate the security settings with disastrous effects, potentially crashing the device or allowing for unauthorized access. This could leave your entire network exposed, making sensitive data vulnerable and putting everything you’ve worked for at risk!

Put simply

Think of it like a crowded elevator where too many people try to squeeze in at once, causing it to behave unpredictably – in this case, potentially crashing your entire system! This vulnerability resides in the formWifiBasicSet function, where insufficient input validation leads to a stack overflow. This means that an attacker can craft inputs that exceed buffer limits, causing unexpected behavior in the application.

What to do

If exploited, an attacker could manipulate the security settings with disastrous effects, potentially crashing the device or allowing for unauthorized access. This could leave your entire network exposed, making sensitive data vulnerable and putting everything you’ve worked for at risk! Immediate action is required! Patch your Tenda FH1202 router to version 1.2.0.15 and ensure that proper input validation is in place to prevent stack overflows from occurring in the future. Regularly review your device configurations for any other security flaws. 🛡️ You've got this! Take these steps and your network will be on the path to safety in no time! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.8th percentile
Published
2024-03-28T00:00Z
EPSS history
Timeline
  • 28 MAR 00:00Z
    Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function
    cvelistv5