CVE-2024-30622

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function

Critical · published March 29, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability in Tenda FH1205 could give an attacker the power to crash your device with a sneaky parameter! Think of it like a hotel room that can only hold a certain number of guests — if you try to cram in too many, the whole building could come crashing down! In this case, the 'mitInterface' parameter is the overstuffed suitcase causing all the chaos. An attacker could exploit this flaw to crash the device and potentially take control of networking functions. This means they could disrupt your internet access, spy on your activities, or even redirect your traffic — absolutely devastating consequences for your privacy!

Put simply

Think of it like a hotel room that can only hold a certain number of guests — if you try to cram in too many, the whole building could come crashing down! In this case, the 'mitInterface' parameter is the overstuffed suitcase causing all the chaos. This stack overflow vulnerability arises in the 'mitInterface' parameter used within the 'fromAddressNat' function. When too much data is sent, it overflows the stack and can lead to arbitrary code execution, allowing for severe manipulation of the device.

What to do

An attacker could exploit this flaw to crash the device and potentially take control of networking functions. This means they could disrupt your internet access, spy on your activities, or even redirect your traffic — absolutely devastating consequences for your privacy! Update your Tenda FH1205 router to version 2.0.0.8 or later, as patches have been released to fix this issue. Ensure your device settings do not allow for excessive data input in the 'mitInterface' parameter to mitigate risks. You've got this! Take these steps, and you'll lock down your network in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.4th percentile
Published
2024-03-29T00:00Z
EPSS history
Timeline
  • 29 MAR 00:00Z
    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function
    cvelistv5