Details of VAR-202403-3270

ID

VAR-202403-3270

CVE

CVE-2024-30625

TITLE

Shenzhen Tenda Technology Co.,Ltd. of fh1205 Stack-based buffer overflow vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2024-020509

DESCRIPTION

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the entrys parameter from fromAddressNat function. Shenzhen Tenda Technology Co.,Ltd. of fh1205 A stack-based buffer overflow vulnerability exists in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This vulnerability stems from the failure of the entries parameter of the fromAddressNat method to properly validate the length of input data. An attacker could exploit this vulnerability to execute arbitrary code on the system

Trust: 2.16

sources: NVD: CVE-2024-30625 // JVNDB: JVNDB-2024-020509 // CNVD: CNVD-2025-21463

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-21463

AFFECTED PRODUCTS

vendor:	tenda	model:	fh1205	scope:	eq	version:	2.0.0.7\(775\)	Trust: 1.0
vendor:	tenda	model:	fh1205	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	fh1205	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	fh1205	scope:	eq	version:	fh1205 firmware 2.0.0.7(775)	Trust: 0.8
vendor:	tenda	model:	fh1205	scope:	eq	version:	v2.0.0.7(775)	Trust: 0.6

sources: CNVD: CNVD-2025-21463 // JVNDB: JVNDB-2024-020509 // NVD: CVE-2024-30625

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2024-30625
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2024-020509
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2025-21463
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2025-21463
severity:	HIGH
baseScore:	7.7
vectorString:	AV:A/AC:L/AU:S/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	5.1
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2024-30625
baseSeverity:	HIGH
baseScore:	8.0
vectorString:	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.1
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2024-020509
baseSeverity:	HIGH
baseScore:	8.0
vectorString:	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-21463 // JVNDB: JVNDB-2024-020509 // NVD: CVE-2024-30625

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-020509 // NVD: CVE-2024-30625

PATCH

title:

Patch for Tenda FH1205 Stack Buffer Overflow Vulnerability

url:

https://www.cnvd.org.cn/patchInfo/show/732691

Trust: 0.6

sources: CNVD: CNVD-2025-21463

EXTERNAL IDS

db:	NVD	id:	CVE-2024-30625	Trust: 3.2
db:	JVNDB	id:	JVNDB-2024-020509	Trust: 0.8
db:	CNVD	id:	CNVD-2025-21463	Trust: 0.6

sources: CNVD: CNVD-2025-21463 // JVNDB: JVNDB-2024-020509 // NVD: CVE-2024-30625

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2024-30625	Trust: 1.4
url:	https://github.com/abcdefg-png/iot-vulnerable/blob/main/tenda/fh/fh1205/fromaddressnat_entrys.md	Trust: 1.0

sources: CNVD: CNVD-2025-21463 // JVNDB: JVNDB-2024-020509 // NVD: CVE-2024-30625

SOURCES

db:	CNVD	id:	CNVD-2025-21463
db:	JVNDB	id:	JVNDB-2024-020509
db:	NVD	id:	CVE-2024-30625

LAST UPDATE DATE

2025-09-19T23:08:55.490000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-21463	date:	2025-09-17T00:00:00
db:	JVNDB	id:	JVNDB-2024-020509	date:	2025-03-17T03:16:00
db:	NVD	id:	CVE-2024-30625	date:	2025-03-13T21:22:18.877

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-21463	date:	2025-09-17T00:00:00
db:	JVNDB	id:	JVNDB-2024-020509	date:	2025-03-17T00:00:00
db:	NVD	id:	CVE-2024-30625	date:	2024-03-29T13:15:16.033