PT-2024-23506 · Tenda · Tenda Fh1202

Published 2024-03-28 · Updated 2024-11-13 · CVE-2024-30588

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14(408)

Description The issue is a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function. This vulnerability can be exploited, potentially allowing attackers to execute arbitrary code.

Recommendations For Tenda FH1202 version 1.2.0.14(408), consider disabling the setSchedWifi function until a patch is available to prevent exploitation of the schedStartTime parameter.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-30588

Affected Products

Tenda Fh1202

References · 6

• 🔥 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/setSchedWifi_start.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-30588 · Security Note
• https://osv.dev/vulnerability/CVE-2024-30588 · Vendor Advisory
• https://twitter.com/techgenyz/status/1856784234524155967 · Twitter Post
• https://t.me/cvenotify/88237 · Telegram Post
• https://twitter.com/CVEnew/status/1773347429875589626 · Twitter Post