PT-2024-2470 · Tenda · Tenda Fh1205

Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: A critical issue affects the formSetCfm function of the /goform/setcfm file, where the manipulation of the funcpara1 argument leads to a stack-based buffer overflow. This can be exploited remotely,...

PT-2024-2467 · Tenda · Tenda Fh1205

Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: A critical vulnerability has been found in the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be launched...

The vulnerability of the form_fast_setting_wifi_set function in the microprogrammed software for Tenda F1203, FH1203, and FH1205 allows a hacker to execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the microprogrammed routing devices Tenda F1203, FH1203, and FH1205 is related to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

CVE-2023-38930

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42multi and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function...

Stack overflow

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

Stack overflow

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42multi and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

CVE-2023-38930

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42multi and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function...

PT-2023-26694 · Tenda · Fh1205 +2

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 FH1203 version 2.0.1.6 FH1205 version 2.0.0.7775 Description: A stack overflow issue was discovered via the deviceId parameter in the formSetDeviceName function. This issue affects the specified versions of Tenda...

CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function...

CVE-2023-38934

CVE-2023-38934 affects Tenda F1203 (v2.0.1.6), FH1203 (v2.0.1.6) and FH1205 (v2.0.0.7(775)). Root cause: stack overflow triggered via the deviceId parameter in the formSetDeviceName function. CVSSv3.1 base score 9.8 (CRITICAL); attack vector/network, complexity low, privileges required none, user...

CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

CVE-2023-38936

CVE-2023-38936 concerns multiple Tenda devices (AC10, AC1206, AC6, AC7, AC5, FH1203, AC9, FH1205) where a stack overflow occurs in the function to set WAN speed (formSetSpeedWan) via the speed_dir parameter. Affected firmware versions include V15.03.06.xx ranges listed in the sources. The core is...