CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

Stack overflow

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

Stack overflow

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

CVE-2023-38931

CVE-2023-38931 is a stack overflow in Tenda devices’ setaccount function when handling the list parameter, affecting multiple models (AC10, AC1206, AC8, AC6, AC7, F1203, AC5, FH1203, etc.). The root cause is improper handling/validation of the list parameter, enabling potential remote code execut...

PT-2023-26694 · Tenda · Fh1205 +2

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 FH1203 version 2.0.1.6 FH1205 version 2.0.0.7775 Description: A stack overflow issue was discovered via the deviceId parameter in the formSetDeviceName function. This issue affects the specified versions of Tenda...

CVE-2023-38940

CVE-2023-38940 affects Tenda F1203 (v2.0.1.6), FH1203 (v2.0.1.6) and FH1205 (v2.0.0.7(775)); a stack overflow is triggered by the ssid parameter in the form_fast_setting_wifi_set function. The available documents confirm the vulnerability’s existence and affected products but do not provide any f...

PT-2023-5179 · Tenda · Tenda F1203 +1

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Tenda FH1203 version 2.0.1.6 Tenda FH1205 version 2.0.0.7775 Description: The issue is related to a stack overflow in the form fast setting wifi set function, which can be exploited via the ssid parameter. This...

CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

CVE-2023-38936

CVE-2023-38936 concerns multiple Tenda devices (AC10, AC1206, AC6, AC7, AC5, FH1203, AC9, FH1205) where a stack overflow occurs in the function to set WAN speed (formSetSpeedWan) via the speed_dir parameter. Affected firmware versions include V15.03.06.xx ranges listed in the sources. The core is...

CVE-2023-38934

CVE-2023-38934 affects Tenda F1203 (v2.0.1.6), FH1203 (v2.0.1.6) and FH1205 (v2.0.0.7(775)). Root cause: stack overflow triggered via the deviceId parameter in the formSetDeviceName function. CVSSv3.1 base score 9.8 (CRITICAL); attack vector/network, complexity low, privileges required none, user...

The vulnerability of the fromVirtualSer function in the microprogramming software for Tenda FH1203 allows a hacker to cause a service failure.

The vulnerability of the fromVirtualSer function in Tenda FH1203 router microprogramming software is related to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda FH1203 allows a hacker to trigger a service failure.

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda FH1203 relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the formSetSpeedWan function in the microprogramming software for Tenda FH1203 allows a hacker to cause a service failure.

The vulnerability of the formSetSpeedWan function in the microprogramming software for Tenda FH1203 relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the form_fast_setting_wifi_set function in the microprogramming software for Tenda FH1203 allows a hacker to cause a service failure.

The vulnerability of the formfastsettingwifiset function in the microprogrammed routing software Tenda FH1203 lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

Tenda FH1203 formSetClientState Method Stack Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the deviceId parameter of the formSetClientState method failing to properly validate the...

Tenda FH1203 formSetSpeedWan method stack buffer overflow vulnerability

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the speeddir parameter of the formSetSpeedWan method failing to properly validate the...