CVE-2024-33213

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.8(8155) EN

Description A stack-based buffer overflow issue was discovered via the mitInterface parameter in the "ip/goform/RouteStatic" API endpoint. This issue can be exploited, potentially leading to unauthorized control of the device.

Recommendations For Tenda FH1206 version 1.2.0.8(8155) EN, as a temporary workaround, consider restricting access to the "ip/goform/RouteStatic" API endpoint until a patch is available. Avoid using the mitInterface parameter in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.