CVE-2024-2976

Summary

CVE-2024-2976 is a critical vulnerability affecting the Tenda F1203 2.0.1.6 device. The issue lies in the R7WebsSecurityHandler function of the /goform/execCommand file. This vulnerability results in a stack-based buffer overflow due to manipulation of the password argument. The exploit can be executed remotely, and the vulnerability identifier VDB-258145 has been assigned to it. Unfortunately, the exploit has been publicly disclosed, increasing the risk for potential attacks. Despite early notification, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.