CVE-2024-30630

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function

Critical · published March 29, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

🚨 A stack overflow in Tenda FH1205 could turn your router into a playground for hackers! 🔥 Think of it like a crowded elevator — if too many people push their way in, it can jam up and stop functioning entirely. This vulnerability allows an attacker to overload the system by sending excessive data to the time parameter, causing it to crash or behave unpredictably. If exploited, an attacker could potentially gain control of the device, leading to unauthorized access to your entire network. This could expose sensitive information or allow them to manipulate connected devices. The consequences could be absolutely devastating, turning your home into an unsecured zone.

Put simply

Think of it like a crowded elevator — if too many people push their way in, it can jam up and stop functioning entirely. This vulnerability allows an attacker to overload the system by sending excessive data to the time parameter, causing it to crash or behave unpredictably. The vulnerability in the Tenda FH1205 arises from a stack overflow in the `saveParentControlInfo` function, specifically related to the handling of the time parameter. This flaw allows an attacker to send specially crafted input, exceeding the buffer limit and compromising the device's integrity.

What to do

If exploited, an attacker could potentially gain control of the device, leading to unauthorized access to your entire network. This could expose sensitive information or allow them to manipulate connected devices. The consequences could be absolutely devastating, turning your home into an unsecured zone. Update your Tenda FH1205 firmware to version 2.0.0.8 or later as soon as possible to patch this vulnerability. Additionally, restrict access to the device's management interface and monitor your network for any suspicious activity. You've got this! Follow these steps, and you'll have your network fortified in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.4th percentile
Published
2024-03-29T00:00Z
EPSS history
Timeline
  • 29 MAR 00:00Z
    Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the time parameter from saveParentControlInfo function
    cvelistv5