CVE-2024-42973

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 02.03.01.35

Description The issue is related to a stack overflow in the fromSetlpBind function via the page parameter. This allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the affected API endpoint. The vulnerability can be exploited by a remote attacker, potentially leading to service disruption.

Recommendations For Tenda FH1206 version 02.03.01.35, consider disabling the fromSetlpBind function until a patch is available to prevent exploitation via the page parameter in crafted POST requests. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.