CVE-2024-2981
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Mar 27, 2024
Updated: Jan 14, 2025
CWE ID 79
Summary
CVE-2024-2581: A critical buffer overflow vulnerability (VDB-258150) has been identified in the Tenda FH1202 1.2.0.14(408) device, specifically in the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. Manipulation of the ssid argument leads to stack-based buffer overflow, enabling a remote attacker to exploit this vulnerability. The exploit has been disclosed publicly, increasing the risk for potential attacks. Despite early notification, the vendor has not responded to the disclosure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.