CVE-2024-30628

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function

Critical · published March 29, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

⚡ A stack overflow vulnerability lurks in Tenda FH1205 v2.0.0.7, just waiting for the right moment to spring into action! 🔥 Think of it like a crowded subway train where one too many passengers can cause a major jam. When the system pushes past its limit, it can lead to chaos, just as this overflow can crash the device or allow an attacker to take control. An attacker could exploit this vulnerability to crash the device or manipulate it, gaining unauthorized access. This could lead to critical data exposure or even full control over the network traffic that’s flowing through your router, putting all connected devices at risk!

Put simply

Think of it like a crowded subway train where one too many passengers can cause a major jam. When the system pushes past its limit, it can lead to chaos, just as this overflow can crash the device or allow an attacker to take control. This stack overflow vulnerability occurs in the 'fromAddressNat' function when processing the 'page' parameter, allowing attackers to potentially execute arbitrary code or crash the device.

What to do

An attacker could exploit this vulnerability to crash the device or manipulate it, gaining unauthorized access. This could lead to critical data exposure or even full control over the network traffic that’s flowing through your router, putting all connected devices at risk! Immediate action is essential! Update the Tenda FH1205 to version 2.0.0.8 or later to close this vulnerability. Additionally, consider implementing strict input validation to prevent such overflows in the future. You've got this! With these steps, you'll have your router secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.4th percentile
Published
2024-03-29T00:00Z
EPSS history
Timeline
  • 29 MAR 00:00Z
    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from fromAddressNat function
    cvelistv5