Tenda FH451: Unsecured File Processing Can Lead to Remote Attack

Summary

A security issue has been found in the Tenda FH451 router, affecting its ability to handle certain file requests. This could allow an attacker to remotely take control of the device. To protect your network, update your Tenda FH451 to the latest version, ideally 1.0.10 or higher.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
tenda	fh451_firmware	1.0.0.9	–

Original title

A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible ...

Original description

A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

nvd CVSS2.0 9.0

nvd CVSS3.1 8.8

nvd CVSS4.0 7.4

Vulnerability type

CWE-119 Buffer Overflow

CWE-120 Classic Buffer Overflow

https://vuldb.com/?ctiid.347220 Permissions Required VDB Entry
https://vuldb.com/?id.347220 Third Party Advisory VDB Entry
https://vuldb.com/?submit.755218 Third Party Advisory VDB Entry
https://vuln.ricky.place/Tenda/FH451/ Exploit Third Party Advisory
https://www.tenda.com.cn/ Product