PT-2024-16108 · Tecno · Tecno 4G Portable Wifi Tr118

Name of the Vulnerable Software and Affected Versions: Tecno 4G Portable WiFi TR118 version V008-20220830 Description: A critical issue affects an unknown functionality of the file /goform/goform get cmd process of the component SMS Check. The manipulation of the order by argument leads to SQL...

PT-2024-7127 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06 Description: A critical issue is found in the function formEasySetPassword of the file /goform/formEasySetPassword, where the manipulation of the curTime argument leads to a buffer overflow. This can be exploited...

PT-2024-8960 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue affects the formResetStatistic function in the file /goform/formResetStatistic. The manipulation of the curTime argument leads to a buffer overflow. This can be initiated remotely...

PT-2024-7238 · D Link · Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: A critical issue affects the function formSetWanPPTP of the file /goform/formSetWanPPTP. The manipulation of the argument webpage leads to buffer overflow. The attack may be initiated remotely...

PT-2024-7235 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: The issue is related to a buffer overflow vulnerability in the formSetWanL2TP function of the /goform/formSetWanL2TP file. This vulnerability can be exploited by sending a specially crafted PO...

The vulnerability of microprogrammed software in Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters, related to lack of access control, allows attackers to circumvent existing security restrictions.

The vulnerability of the Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and reset the device to its factory settings through unprotected...

PT-2024-29410 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A stack-based buffer overflow issue was found via the page parameter at the "/ip/goform/DhcpListClient" API endpoint. Recommendations: For Tenda FH1201 version 1.2.0.14, avoid using the page paramete...

PT-2024-25142 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.3.10 EN Description: A stack-based buffer overflow issue was discovered via the deviceId parameter at the "ip/goform/saveParentControlInfo" endpoint. This allows for potential exploitation. Recommendations: For Tenda...

PT-2024-28839 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A stack-based buffer overflow issue exists due to a vulnerability in the /goform/SetVirtualServerCfg endpoint, specifically within the sub 6320C function. This allows for potential exploitation...

PT-2024-28838 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A stack-based buffer overflow issue exists in the /goform/SetStaticRouteCfg endpoint, specifically within the sub 519F4 function. This issue can lead to a buffer overflow on the stack. Recommendations...

PT-2024-5190 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: The issue is related to a stack-based buffer overflow via the list1 parameter at the "ip/goform/DhcpListClient" endpoint. This can be exploited by a remote attacker to impact the confidentialit...

PT-2024-3217 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical issue affects the function formIPMacBindModify of the file /goform/modifyIpMacBind. The manipulation of the arguments IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, and...

Tenda AC500 安全漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow in the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file. No details of the vulnerability are...

PT-2024-3758 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the fromRouteStatic function of the Tenda W30E router's software. This can be exploited by a remote attacker using a specially crafted POST...

PT-2024-3768 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the frmL7PlotForm function of the file /goform/frmL7ProtForm. This can be exploited by manipulating the page argument, allowing a remote...

PT-2024-3134 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: The issue is related to a stack-based buffer overflow in the formSetRebootTimer function of the /goform/SetRebootTimer API endpoint. This can be exploited by manipulating the rebootTime argument,...

PT-2024-3133 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue affects the function R7WebsSecurityHandler of the file /goform/execCommand, leading to a stack-based buffer overflow when the password argument is manipulated. This can be exploited...

PT-2024-2879 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical issue affects the R7WebsSecurityHandler function of the /goform/execCommand file, leading to a stack-based buffer overflow when the password argument is manipulated. This can be exploite...

PT-2024-23142 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack may be initiated remotely...

PT-2024-2600 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: The issue is caused by a stack-based buffer overflow in the formSetDeviceName function of the /goform/SetOnlineDevName file. This can be exploited remotely by manipulating the devName argument,...