CVE-2024-46046

Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function

Medium · published September 13, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in Tenda's FH451 router! When the RouteStatic function gets overwhelmed, things can go off the rails. 😲 Think of this vulnerability as a crowded restaurant where an overly ambitious waiter tries to take on too many orders at once. Just like a stack of plates teetering on the edge, too much input can lead to a crash! If exploited, an attacker could trigger this overflow, potentially crashing the router or causing unpredictable behavior. While it might not lead to a full-scale breach, the chaos could disrupt your network connectivity, leaving you feeling helpless in a digital storm!

Put simply

Think of this vulnerability as a crowded restaurant where an overly ambitious waiter tries to take on too many orders at once. Just like a stack of plates teetering on the edge, too much input can lead to a crash! The stack overflow vulnerability in Tenda FH451 v1.0.0.9 occurs within the RouteStatic function, allowing attackers to send excessive data that could overflow the stack, leading to crashes or unexpected behavior.

What to do

If exploited, an attacker could trigger this overflow, potentially crashing the router or causing unpredictable behavior. While it might not lead to a full-scale breach, the chaos could disrupt your network connectivity, leaving you feeling helpless in a digital storm! To safeguard your network, update your Tenda FH451 router to the latest firmware version. Regularly check for updates, and limit any unnecessary access to the router's settings to reduce the risk of exploitation. 🛡️ You've got this! Keep those routers secure and your network running smoothly! 💪✨

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00595 · 47.8th percentile
Published
2024-09-13T00:00Z
EPSS history
Timeline
  • 13 SEP 00:00Z
    Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function
    cvelistv5