CVE-2024-42948

high · 7.5

Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.5

CVSS

10.6%

EPSS (exploit prob.)

96th

EPSS percentile

2024-08-15

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
tenda	fh1201_firmware	1.2.0.14(408)
tenda	fh1201	all versions

Check a specific version with /api/v1/cve/match.

References

https://github.com/TTTJJJWWW/AHU-IoT-vulnerable/blob/main/Tenda/FH1201/fromPptpUserSetting.md

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-42948