CVE-2024-41460: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic...

The vulnerability of the R7WebsSecurityHandler function in the /goform/execCommand function of the Tenda AX1806 router’s microprogramming system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the R7WebsSecurityHandler function in the /goform/execCommand function of the Tenda AX1806 router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2024-41466: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting...

CVE-2024-41465: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...

CVE-2024-41459: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter at ip/goform/QuickIndex...

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda W9 wireless access point’s microprogramming system allows a attacker to execute arbitrary code.

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda W9 wireless access point’s microprogramming system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially...

The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST...

CVE-2024-39963

AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution RCE vulnerability via the macFilterType parameter at /goform/setMacFilterCfg...

CVE-2024-39962

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

CVE-2024-39963: Improper Neutralization of Special Elements used in a Command

AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution RCE vulnerability via the macFilterType parameter at /goform/setMacFilterCfg...

CVE-2024-39962: Improper Control of Generation of Code

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

CVE-2024-33181

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter...

CVE-2024-33182

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter...

CVE-2024-33182

The CitE CVE-2024-33182 affects Tenda AC18 (firmware 15.03.3.10_EN). A stack-based buffer overflow is triggered via the deviceId parameter in ip/goform/addWifiMacFilter. Publicly reported metrics show a network-exposed, high-severity impact (NVD CVSS v3.1: 9.8/CRITICAL; Confidentiality/Integrity/...

CVE-2024-33180

CVE-2024-33180 affects Tenda AC18 (firmware 15.03.3.10_EN). A stack-based buffer overflow originates from the deviceId parameter in ip/goform/saveParentControlInfo, enabling potential arbitrary code execution or denial of service. Documented impact is high for confidentiality, integrity, and avai...

CVE-2024-33182

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter...

CVE-2024-33180

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo...

CVE-2024-33180: Out-of-bounds Write

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo...

PT-2024-25143 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.3.10 EN Description: A stack-based buffer overflow issue was discovered via the deviceMac parameter at the "ip/goform/addWifiMacFilter" endpoint. This issue can be exploited, potentially leading to unintended...

CVE-2024-33181: Stack-based Buffer Overflow

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter...