CVE-2024-33211

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.8(8155) EN

Description A stack-based buffer overflow issue was discovered via the PPPOEPassword parameter in the "ip/goform/QuickIndex" endpoint. This issue can be exploited, but details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are not provided.

Recommendations For Tenda FH1206 version 1.2.0.8(8155) EN, as a temporary workaround, consider restricting access to the "ip/goform/QuickIndex" endpoint until a patch is available. Avoid using the PPPOEPassword parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.