CVE-2024-34942

Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:fh1206_firmware:1.2.0.8\(8155\)_en:*:*:*:*:*:*:*
cpe:2.3:h:tenda:fh1206:-:*:*:*:*:*:*:*

History

04 Apr 2025, 14:46

Type Values Removed Values Added
CPE cpe:2.3:o:tenda:fh1206_firmware:1.2.0.8\(8155\)_en:*:*:*:*:*:*:*
cpe:2.3:h:tenda:fh1206:-:*:*:*:*:*:*:*
References () https://palm-vertebra-fe9.notion.site/formexeCommand-200db77a90d34c708b903c935c7c65c0 - () https://palm-vertebra-fe9.notion.site/formexeCommand-200db77a90d34c708b903c935c7c65c0 - Exploit, Third Party Advisory
First Time Tenda fh1206
Tenda fh1206 Firmware
Tenda

21 Nov 2024, 09:19

Type Values Removed Values Added
References () https://palm-vertebra-fe9.notion.site/formexeCommand-200db77a90d34c708b903c935c7c65c0 - () https://palm-vertebra-fe9.notion.site/formexeCommand-200db77a90d34c708b903c935c7c65c0 -

01 Aug 2024, 13:52

Type Values Removed Values Added
Summary
  • (es) Se descubrió que Tenda FH1206 V1.2.0.8(8155)_EN contiene una vulnerabilidad de desbordamiento del búfer basada en pila a través del parámetro funcpara1 en ip/goform/exeCommand.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CWE CWE-121

14 May 2024, 15:39

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-14 15:39

Updated : 2025-04-04 14:46


NVD link : CVE-2024-34942

Mitre link : CVE-2024-34942

CVE.ORG link : CVE-2024-34942


JSON object : View

Products Affected

tenda

  • fh1206
  • fh1206_firmware
CWE
CWE-121

Stack-based Buffer Overflow