CVE-2024-41473

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac

High · published July 25, 2024

CVSS v3.1
8.0
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

⚡ A simple command injection via the mac parameter can let attackers run arbitrary commands on your Tenda FH1201 router! Think of it like a restaurant where the chef accepts any special request without checking if it’s safe — an unscrupulous diner could ask for anything and ruin the meal for everyone. If exploited, an attacker could gain complete control over your router, leading to data breaches, network manipulation, or even hijacking of connected devices. This could compromise your entire home network, leaving it vulnerable to further attacks and breaches!

Put simply

Think of it like a restaurant where the chef accepts any special request without checking if it’s safe — an unscrupulous diner could ask for anything and ruin the meal for everyone. This command injection vulnerability allows an attacker to execute shell commands through the mac parameter at ip/goform/WriteFacMac, bypassing normal restrictions and protections.

What to do

If exploited, an attacker could gain complete control over your router, leading to data breaches, network manipulation, or even hijacking of connected devices. This could compromise your entire home network, leaving it vulnerable to further attacks and breaches! Update your Tenda FH1201 to version 1.2.0.15 immediately to patch this vulnerability. Additionally, review your router's settings to ensure no unauthorized commands have been executed. Regularly check for firmware updates to stay secure! You've got this! Follow these steps, and you’ll have your router secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06749 · 94.0th percentile
Published
2024-07-25T00:00Z
EPSS history
Timeline
  • 25 JUL 00:00Z
    Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/WriteFacMac
    cvelistv5