CVE-2024-42943 in FH1201

Résumé

par VulDB • 23/06/2026

Il firmware Tenda FH1201 v1.2.0.14 (408) presenta un bug di stack overflow nel parametro PPPOEPassword della funzione fromAdvSetWan. Questa vulnerabilità consente agli attaccanti di causare un Denial of Service (DoS) tramite una richiesta POST appositamente costruita.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: MITRE
• Réserver: 05/08/2024
• Divulgation: 15/08/2024
• Modérer: accepté
• Entrée: VDB-274769
• CPE: prêt
• CWE: CWE-404 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.00682
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-42943
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-42943
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-42943/