Sign-up

ID

VAR-202403-3049


CVE

CVE-2024-30637


TITLE

Shenzhen Tenda Technology Co.,Ltd.  of  F1202  Command injection vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2024-020497

DESCRIPTION

Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter. Shenzhen Tenda Technology Co.,Ltd. of F1202 Firmware contains a command injection vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2024-30637 // JVNDB: JVNDB-2024-020497

AFFECTED PRODUCTS

vendor:tendamodel:f1202scope:eqversion:1.2.0.20\(408\)

Trust: 1.0

vendor:tendamodel:f1202scope:eqversion:f1202 firmware 1.2.0.20(408)

Trust: 0.8

vendor:tendamodel:f1202scope:eqversion: -

Trust: 0.8

vendor:tendamodel:f1202scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2024-020497 // NVD: CVE-2024-30637

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2024-30637
value: HIGH

Trust: 1.0

OTHER: JVNDB-2024-020497
value: HIGH

Trust: 0.8

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2024-30637
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2024-020497
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2024-020497 // NVD: CVE-2024-30637

PROBLEMTYPE DATA

problemtype:CWE-77

Trust: 1.0

problemtype:Command injection (CWE-77) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2024-020497 // NVD: CVE-2024-30637

EXTERNAL IDS

db:NVDid:CVE-2024-30637

Trust: 2.6

db:JVNDBid:JVNDB-2024-020497

Trust: 0.8

sources: JVNDB: JVNDB-2024-020497 // NVD: CVE-2024-30637

REFERENCES

url:https://github.com/abcdefg-png/iot-vulnerable/blob/main/tenda/f/f1202/formwritefacmac.md

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2024-30637

Trust: 0.8

sources: JVNDB: JVNDB-2024-020497 // NVD: CVE-2024-30637

SOURCES

db:JVNDBid:JVNDB-2024-020497
db:NVDid:CVE-2024-30637

LAST UPDATE DATE

2025-03-18T23:32:33.499000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2024-020497date:2025-03-17T03:05:00
db:NVDid:CVE-2024-30637date:2025-03-13T21:26:03.370

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2024-020497date:2025-03-17T00:00:00
db:NVDid:CVE-2024-30637date:2024-03-29T14:15:14.727