Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 v1.2.0.14408, which is caused by the deviceMac parameter of the addWifiMacFilter method failing to correctly validate the length of the input data, and can be exploited to execute...

CVE-2024-30591

CVE-2024-30591 affects Tenda FH1202, firmware version 1.2.0.14(408). The vulnerability is a stack overflow in the time parameter of the saveParentControlInfo function, caused by inadequate input length validation. Impact is described as high severity with potential for arbitrary code execution or...

CVE-2024-30595

Affected software : Tenda FH1202 router. Vulnerability : stack overflow in the deviceId parameter of the addWifiMacFilter function in v1.2.0.14(408). The issue is described across multiple sources (CVE entry, Red Hat advisory, CNVD/CNNVD entries) and is characterized as a critical impact with pot...

CVE-2024-30584

CVE-2024-30584 affects Tenda FH1202 router, specifically v1.2.0.14(408). The vulnerability is a stack overflow in the security parameter of the formWifiBasicSet function. This is reported with a CVSS v3.1 base score of 9.8 (CRITICAL) and a network attack vector with no user interaction required. ...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 v1.2.0.14408, which is caused by the deviceName parameter of the formSetDeviceName method failing to correctly validate the length of the input data, and can be exploited by an...

PT-2024-2455 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a stack overflow vulnerability in the fromAddressNat function, specifically in the entrys parameter. This vulnerability can be exploited by a remote attacker to impact the...

CVE-2024-30593

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability located in the deviceName parameter of the formSetDeviceName function...

CVE-2024-30594

The CVE-2024-30594 entry applies to the Tenda FH1202 wireless router, specifically firmware v1.2.0.14(408). A stack/buffer overflow exists in the deviceMac parameter of the addWifiMacFilter function. Public sources describe that input length validation can fail, enabling arbitrary code execution ...

PT-2024-23504 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a stack overflow vulnerability. It affects the security 5g parameter of the formWifiBasicSet function. Recommendations: For Tenda FH1202 version 1.2.0.14408, consider...

CVE-2024-2987

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2986

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

CVE-2024-2987

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2985

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-2986

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

CVE-2024-2985

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-2987 Tenda FH1202 GetParentControlInfo stack-based overflow

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2987 Tenda FH1202 GetParentControlInfo stack-based overflow

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2987

CVE-2024-2987 affects Tenda FH1202 (firmware 1.2.0.14(408)). The GetParentControlInfo endpoint (/goform/GetParentControlInfo) accepts a mac parameter whose length validation allows a stack-based buffer overflow, enabling remote code execution or denial of service as described in multiple sources....

CVE-2024-2986

CVE-2024-2986 affects Tenda FH1202 firmware 1.2.0.14(408). The stack-based buffer overflow is triggered by manipulating the speed_dir argument in the /goform/SetSpeedWan formSetSpeedWan function, with remote exploitation possible and public disclosure of exploits. Impact concerns confidentiality,...

CVE-2024-2986 Tenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflow

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speeddir leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...