CVE-2024-33212

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.8(8155) EN

Description A stack-based buffer overflow issue was discovered via the funcpara1 parameter in the "ip/goform/setcfm" endpoint. This issue can be exploited, potentially leading to unintended consequences.

Recommendations For Tenda FH1206 version 1.2.0.8(8155) EN, as a temporary workaround, consider restricting access to the "ip/goform/setcfm" endpoint until a patch is available. Avoid using the funcpara1 parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.