Buffer overflow

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without...

CVE-2021-27707

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without...

CVE-2021-27706

Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without...

CVE-2021-27706

CVE-2021-27706 affects Tenda G1 and G3 routers. A buffer overflow in the IPMacBindIndex handling within the formIPMacBindDel path allows remote attackers to execute arbitrary code, via a crafted action/IPMacBindIndex request, because the parameter is passed to strcpy without bounds checking. This...

CVE-2021-27705

Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...

CVE-2021-27705

The CVE-2021-27705 entry involves the Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN, where a buffer overflow in the formQOSRuleDel routine exists. Specifically, the function passes the qosIndex parameter directly to strcpy without bounds checking, enabling remote code execution. Mult...

Tenda G1 and G3 安全漏洞

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action IPMacBindIndex request...

Command Execution Vulnerability in Tenda G1 Router of Shenzhen Jixiang Tenda Technology Co.

The Tenda G1 is an enterprise-class AP management router with a 100-person bandwidth. A command execution vulnerability exists in the Tenda G1 router of Shenzhen Jixiang Tenda Technology Company Limited, which can be exploited by an attacker to remotely execute commands...

CVE-2015-0949

The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...

Design/Logic Flaw

The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...

CVE-2015-0949

The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...

CVE-2015-0949

CVE-2015-0949 pertains to SMM (System Management Mode) call-outs that may run outside SMRAM in certain BIOS implementations (Dell Latitude E6430 A09, HP EliteBook 850 G1 L71 Ver. 01.09, and potentially others). Root cause: SMM code does not ensure function calls operate on SMRAM memory locations,...

HPESBHF03960 rev.1 - HPE Lights Out 100 (LO100) Remote Management for ProLiant G1 - G6 servers, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Lights-Out 100 LO100 Remote Management all - denial of service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-12264 |...

D-Link DIR-825AC G1 Input Validation Error Vulnerability (CNVD-2019-39559)

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A cross-router hidden channel vulnerability exists in the D-link DIR-825AC G1. The vulnerability stems from insufficient isolation between host and client networks established by the same device. An attacker could exploit th...

Design/Logic Flaw

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK...

CVE-2019-13263

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK...

CVE-2019-13263

D-Link DIR-825AC G1 (and related DIR-882 family) devices are affected by insufficient isolation between host and guest networks. The vulnerability arises when a DHCP Request with a Transaction ID causes the router to reply with an ACK/NAK, and the NAK can be sent to both Host and Guest networks u...

CVE-2019-13264

CVE-2019-13264 affects D-Link DIR-825AC G1 devices, exposing cross-network data flow between host and guest networks within the same device. The root cause is insufficient isolation, enabling data transfer via the IGMP Group IP field when a sender joins and leaves an IGMP group; the router then b...

CVE-2019-13264

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

CVE-2019-13265

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. They forward ARP requests, which are sent as broadcast packets, between the host and the guest networks. To use this leakage as a direct covert...