CVE-2024-3007: Tenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflow
A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7(775). This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258293 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3007?
CVE-2024-3007 is classified as a critical vulnerability.
How do I fix CVE-2024-3007?
Fixing CVE-2024-3007 involves updating the Tenda FH1205 firmware to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2024-3007?
CVE-2024-3007 is a stack-based buffer overflow vulnerability.
Which devices are affected by CVE-2024-3007?
The vulnerability affects Tenda FH1205 devices running firmware version 2.0.0.7(775).
What mitigations can be applied for CVE-2024-3007?
Mitigations for CVE-2024-3007 include disabling any unnecessary services and applying firmware updates as soon as they are available.