CVE-2024-2982

Summary

CVE-2024-2982 is a critical vulnerability affecting Tenda FH1202 versions 1.2.0.14(408). The function formWriteFacMac in the /goform/WriteFacMac file contains a command injection flaw. By manipulating the mac argument, attackers can execute arbitrary commands on the system. This vulnerability, identified as VDB-258151, has been publicly disclosed and exploited. Regrettably, the vendor did not respond to early notifications about the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.