CVE-2024-3008

A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7(775). Affected is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258294 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-121
• CWE-787

• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formexeCommand.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.258294Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.258294Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.301487Third Party Advisory, VDB Entry
• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1205/formexeCommand.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.258294Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.258294Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.301487Third Party Advisory, VDB Entry

Published

Mar 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30074Windows Link Layer Topology Discovery Protocol Remote Code E…8
• CVE-2024-30075Windows Link Layer Topology Discovery Protocol Remote Code E…8
• CVE-2024-30076Windows Container Manager Service Elevation of Privilege Vul…6.8
• CVE-2024-30077Windows OLE Remote Code Execution Vulnerability8
• CVE-2024-30078Windows Wi-Fi Driver Remote Code Execution Vulnerability8.8
• CVE-2024-30079Windows Remote Access Connection Manager Elevation of Privil…7.8
• CVE-2024-30080Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…9.8
• CVE-2024-30081Windows NTLM Spoofing Vulnerability7.1
• CVE-2024-30082Win32k Elevation of Privilege Vulnerability7.8
• CVE-2024-30083Windows Standards-Based Storage Management Service Denial of…7.5
• CVE-2024-30084Windows Kernel-Mode Driver Elevation of Privilege Vulnerabil…7
• CVE-2024-30085Windows Cloud Files Mini Filter Driver Elevation of Privileg…7.8