Lucene search
+L

2652 matches found

CNNVD
CNNVD
added 2024/08/27 12:0 a.m.6 views

Tenda G3 安全漏洞

Tenda G3 is a Qos Vpn router from Tenda China. A buffer overflow vulnerability exists in Tenda G3 version 15.11.0.20, which is caused by the enable/level/module parameter of the formSetDebugCfg function in the /goform/setDebugCfg file failing to correctly validate the length of the input data,...

9.8CVSS8.2AI score0.01213EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/27 12:0 a.m.7 views

PT-2024-6437 · Tenda · Tenda O5

Name of the Vulnerable Software and Affected Versions: Tenda O5 version 1.0.0.85017 Description: The issue is related to a stack-based buffer overflow in the fromSafeSetMacFilter function of the /goform/setMacFilterList file. This can be exploited remotely, potentially allowing an attacker to...

10CVSS9.2AI score0.0128EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2024/08/27 12:0 a.m.10 views

PT-2024-6436 · Tenda · Tenda O1

Name of the Vulnerable Software and Affected Versions: Tenda O1 version 1.0.0.710648 Description: A critical issue affects the fromDhcpSetSer function of the file /goform/DhcpSetSer, allowing a remote attacker to exploit a stack-based buffer overflow vulnerability. The manipulation of the argumen...

10CVSS9.1AI score0.01213EPSS
SaveExploits1References16
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:0 a.m.7 views

The vulnerability of microprogrammed software in Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters, related to lack of access control, allows attackers to circumvent existing security restrictions.

The vulnerability of the Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and reset the device to its factory settings through unprotected...

9CVSS5.5AI score0.00797EPSS
SaveExploits0References5Affected Software14
OSV
OSV
added 2024/08/15 5:15 p.m.6 views

CVE-2024-42978

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.1AI score0.0123EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/15 5:15 p.m.10 views

CVE-2024-42947

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.1AI score0.0098EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.10 views

PT-2024-30218 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: An issue in the handler function in "/goform/telnet" allows attackers to execute arbitrary commands via a crafted HTTP request. Recommendations: For Tenda FH1201 version 1.2.0.14, as a temporary...

9.8CVSS7.5AI score0.0098EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.10 views

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a command execution vulnerability that stems from a problem with the handler function in /goform/telnet, which can be exploited by an attacker to execute arbitrary commands via specially crafted HTTP requests...

9.8CVSS8AI score0.0098EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/12 1:38 p.m.6 views

CVE-2024-29082

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints...

8.6CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2024/08/12 1:38 p.m.31 views

CVE-2024-29082

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints...

8.8CVSS0.00797EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/08 7:23 p.m.19 views

CVE-2024-29082 Vonets WiFi Bridges Improper Access Control

Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication and factory reset the device via unprotected goform endpoints...

8.8CVSS7.2AI score0.00797EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/07 3:15 p.m.7 views

CVE-2024-7581

A vulnerability classified as critical has been found in Tenda A301 15.13.08.12. This affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit...

9.8CVSS6.4AI score0.01366EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/07 12:0 a.m.6 views

Tenda A301 缓冲区错误漏洞

Tenda A301 is a wireless signal extender from Tenda, China. Tenda A301 suffers from a buffer overflow vulnerability that originates from the function formWifiBasitSet in /goform/WifiBasicSet, no detailed vulnerability details are provided at this time...

9.8CVSS7.5AI score0.01366EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/07 12:0 a.m.8 views

Tenda i22 安全漏洞

The Tenda i22 is a wireless access point from Tenda China. The Tenda i22 suffers from a buffer overflow vulnerability that originates from the accessCode/data/acceInfo parameter of the formApPortalAccessCodeAuth method in the /goform/apPortalAccessCodeAuth path that contains a buffer overflow...

9.8CVSS7.5AI score0.01366EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/07 12:0 a.m.11 views

Tenda i22 安全漏洞

The Tenda i22 is a wireless access point from Tenda China. The Tenda i22 suffers from a buffer overflow vulnerability that originates from a buffer overflow caused by the parameters of the function formApPortalOneKey Auth in /goform/apPortalOneKeyAuth. No detailed vulnerability details are...

9.8CVSS7.5AI score0.01366EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/02 12:0 a.m.11 views

PT-2024-7662 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version v02.03.01.35 Description: An issue in the handler function in "/goform/telnet" allows attackers to execute arbitrary commands via a crafted HTTP request. The vulnerability is related to the lack of input data sanitization...

9.8CVSS7.6AI score0.0123EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/08/01 12:0 a.m.8 views

PT-2024-5763 · Vonets · Vonets Wifi Bridge Repeaters +1

Name of the Vulnerable Software and Affected Versions: Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior Description: The issue is related to improper access control, allowing an unauthenticated remote attacker to bypass authentication and factory reset...

9CVSS7.6AI score0.00797EPSS
SaveExploits0References12
OSV
OSV
added 2024/07/27 9:15 p.m.10 views

CVE-2024-7152

A vulnerability was found in Tenda O3 1.0.0.102478. It has been rated as critical. This issue affects the function fromSafeSetMacFilter of the file /goform/setMacFilterList. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be initiated remotely. The explo...

8.8CVSS6.5AI score0.01286EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/25 10:15 p.m.4 views

CVE-2024-41468

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand...

9.8CVSS5.8AI score0.04571EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/25 10:15 p.m.30 views

CVE-2024-41468

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand...

9.8CVSS0.04571EPSS
SaveExploits0References1
Rows per page
Query Builder