CVE-2024-42953 in FH1201

Résumé

par VulDB • 22/05/2026

Il firmware Tenda FH1201 v1.2.0.14 (408) presenta un bug di stack overflow nel parametro PPW della funzione fromWizardHandle. Questa vulnerabilità consente agli attaccanti di causare un'interruzione del servizio (DoS) tramite una richiesta POST manipolata ad hoc.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: MITRE
• Réserver: 05/08/2024
• Divulgation: 15/08/2024
• Modérer: accepté
• Entrée: VDB-274776
• CPE: prêt
• CWE: CWE-404 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.00558
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-42953
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-42953
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-42953/