Details of VAR-202403-3323

ID

VAR-202403-3323

CVE

CVE-2024-30622

TITLE

Shenzhen Tenda Technology Co.,Ltd. of fh1205 Stack-based buffer overflow vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2024-020510

DESCRIPTION

Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function. Shenzhen Tenda Technology Co.,Ltd. of fh1205 A stack-based buffer overflow vulnerability exists in the firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This vulnerability stems from the mitInterface parameter in the fromAddressNat method failing to properly validate the length of input data. An attacker could exploit this vulnerability to execute arbitrary code on the system

Trust: 2.16

sources: NVD: CVE-2024-30622 // JVNDB: JVNDB-2024-020510 // CNVD: CNVD-2025-21464

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-21464

AFFECTED PRODUCTS

vendor:	tenda	model:	fh1205	scope:	eq	version:	2.0.0.7\(775\)	Trust: 1.0
vendor:	tenda	model:	fh1205	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	fh1205	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	fh1205	scope:	eq	version:	fh1205 firmware 2.0.0.7(775)	Trust: 0.8
vendor:	tenda	model:	fh1205	scope:	eq	version:	v2.0.0.7(775)	Trust: 0.6

sources: CNVD: CNVD-2025-21464 // JVNDB: JVNDB-2024-020510 // NVD: CVE-2024-30622

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2024-30622
value:	CRITICAL
Trust: 1.0
OTHER:	JVNDB-2024-020510
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2025-21464
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2025-21464
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2024-30622
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2024-020510
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-21464 // JVNDB: JVNDB-2024-020510 // NVD: CVE-2024-30622

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-020510 // NVD: CVE-2024-30622

PATCH

title:

Patch for Tenda FH1205 Stack Buffer Overflow Vulnerability (CNVD-2025-21464)

url:

https://www.cnvd.org.cn/patchInfo/show/732696

Trust: 0.6

sources: CNVD: CNVD-2025-21464

EXTERNAL IDS

db:	NVD	id:	CVE-2024-30622	Trust: 3.2
db:	JVNDB	id:	JVNDB-2024-020510	Trust: 0.8
db:	CNVD	id:	CNVD-2025-21464	Trust: 0.6

sources: CNVD: CNVD-2025-21464 // JVNDB: JVNDB-2024-020510 // NVD: CVE-2024-30622

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2024-30622	Trust: 1.4
url:	https://github.com/abcdefg-png/iot-vulnerable/blob/main/tenda/fh/fh1205/fromaddressnat_mitinterface.md	Trust: 1.0

sources: CNVD: CNVD-2025-21464 // JVNDB: JVNDB-2024-020510 // NVD: CVE-2024-30622

SOURCES

db:	CNVD	id:	CNVD-2025-21464
db:	JVNDB	id:	JVNDB-2024-020510
db:	NVD	id:	CVE-2024-30622

LAST UPDATE DATE

2025-09-18T23:14:27.880000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-21464	date:	2025-09-17T00:00:00
db:	JVNDB	id:	JVNDB-2024-020510	date:	2025-03-17T03:16:00
db:	NVD	id:	CVE-2024-30622	date:	2025-03-13T21:23:14.273

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-21464	date:	2025-09-17T00:00:00
db:	JVNDB	id:	JVNDB-2024-020510	date:	2025-03-17T00:00:00
db:	NVD	id:	CVE-2024-30622	date:	2024-03-29T13:15:15.870