github.com
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formSetDeviceName_deviceId.md CVE-2024-30596
CRITICAL
Record summary
CVE-2024-30596 has a selected CVSS score of 9.8 (critical).
Description
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 28, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
fh1202_firmwareBrowse tenda / fh1202_firmwareDefault status: unknown | CVE List | 1.2.0.14\(408\) | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-30596