CVE-2024-30602

Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function

Critical · published March 28, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🔥 A single faulty input in the Tenda FH1203 might just bring your network to its knees! Think of this vulnerability like a restaurant kitchen where one chef keeps misplacing an order ticket—the entire dish gets messed up, and the rest of the kitchen has to scramble to fix it. In this case, the mishap in the `schedStartTime` parameter can lead to a stack overflow, sending your device into chaos. An attacker could exploit this flaw to crash the device or execute arbitrary code, potentially gaining control over your entire network—an absolute nightmare for your home or business security! Imagine a rogue chef hijacking dinner service, but in the world of your Wi-Fi. 😱

Put simply

Think of this vulnerability like a restaurant kitchen where one chef keeps misplacing an order ticket—the entire dish gets messed up, and the rest of the kitchen has to scramble to fix it. In this case, the mishap in the `schedStartTime` parameter can lead to a stack overflow, sending your device into chaos. The stack overflow occurs in the `setSchedWifi` function when processing user input for the `schedStartTime` parameter, allowing attackers to trigger overflow conditions that can lead to code execution or crashes.

What to do

An attacker could exploit this flaw to crash the device or execute arbitrary code, potentially gaining control over your entire network—an absolute nightmare for your home or business security! Imagine a rogue chef hijacking dinner service, but in the world of your Wi-Fi. 😱 Immediately patch your Tenda FH1203 router to version v2.0.1.7 or later to mitigate this vulnerability. Regularly review your device settings and limit external access to administrative functions to further enhance your security. 🔒 You've got this! By taking these steps, you're actively protecting your network like a true security hero! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00729 · 53.7th percentile
Published
2024-03-28T00:00Z
EPSS history
Timeline
  • 28 MAR 00:00Z
    Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function
    cvelistv5