PT-2024-2458 · Tenda · Tenda F1203

Published 2024-03-28 · Updated 2024-08-01 · CVE-2024-30599

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda FH1203 version 2.0.1.6

Description The issue is related to a stack overflow vulnerability in the addWifiMacFilter function, specifically with the deviceMac parameter. This vulnerability can be exploited through a specially crafted POST request to the /goform/addWifiMacFilter endpoint, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Tenda FH1203 version 2.0.1.6, consider disabling the addWifiMacFilter function until a patch is available to prevent exploitation. Additionally, restrict access to the /goform/addWifiMacFilter endpoint to minimize the risk of exploitation. Avoid using the deviceMac parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-02436

CVE-2024-30599

Affected Products

Tenda F1203

References · 7

• 🔥 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/addWifiMacFilter_deviceMac.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-30599 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02436 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-30599 · Security Note
• https://vuldb.com/ru/?id.258511 · Note
• https://twitter.com/VulmonFeeds/status/1773390175285981661 · Twitter Post
• https://twitter.com/CVEnew/status/1773461423731150984 · Twitter Post