CVE-2024-2994

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258163. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Tenda	FH1203	2.0.1.6
tenda	fh1203_firmware	2.0.1.6

References

https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/GetParentControlInfo.mdExploit
https://vuldb.com/?ctiid.258163Permissions Required, VDB Entry
https://vuldb.com/?id.258163Third Party Advisory, VDB Entry
https://vuldb.com/?submit.301373Third Party Advisory, VDB Entry
https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/GetParentControlInfo.mdExploit
https://vuldb.com/?ctiid.258163Permissions Required, VDB Entry
https://vuldb.com/?id.258163Third Party Advisory, VDB Entry
https://vuldb.com/?submit.301373Third Party Advisory, VDB Entry

Timeline

Published: Mar 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-299418.0Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create credentials for any CVE-2024-299439.8An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This CVE-2024-299448.4An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent proce CVE-2024-299457.2In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes authentication tokens during the token validat CVE-2024-299468.1In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could CVE-2024-299472.7There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an CVE-2024-299483.8There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulnerability by sending s CVE-2024-299497.2There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to exec CVE-2024-29955.4A vulnerability was found in NUUO Camera up to 20240319 and classified as problematic. This issue affects some unknown processing of the fil CVE-2024-299505.9The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The CVE-2024-299515.7Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection.CVE-2024-299525.5A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store pas