PT-2024-26261 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: A stack-based buffer overflow issue was found via the funcpara1 parameter at the "ip/goform/exeCommand" endpoint. Recommendations: For Tenda FH1206 version 1.2.0.88155 EN, avoid using the...

PT-2024-3755 · D Link · D-Link Dir-619L Rev.B

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: The issue is related to a buffer overflow vulnerability in the /bin/boa component of the D-Link DIR-619L Rev.B router, specifically via the "goform/formWPS" endpoint, where the webpage paramet...

PT-2024-5190 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: The issue is related to a stack-based buffer overflow via the list1 parameter at the "ip/goform/DhcpListClient" endpoint. This can be exploited by a remote attacker to impact the confidentialit...

PT-2024-26262 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: A stack-based buffer overflow issue was found via the PPW parameter at the "ip/goform/WizardHandle" API endpoint. Recommendations: For Tenda FH1206 version 1.2.0.88155 EN, avoid using the PPW...

PT-2024-3636 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: The issue is related to a stack-based buffer overflow via the page parameter at the "ip/goform/DhcpListClient" endpoint. This can be exploited by sending a specially crafted POST request,...

The vulnerability of the sub_42C014() function (/goform/PowerSaveSet) in the Tenda TX9 Pro router’s microprogramming system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42C014 function /goform/PowerSaveSet of the Tenda TX9 Pro router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability can allow an attacker to compromise the...

CVE-2024-4492

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.144656. This issue affects the function formOfflineSet of the file /goform/setStaOffline. The manipulation of the argument GO/ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely...

The vulnerability of the formSetAccessCodeInfo function (goform/setAccessCodeData) in the Tenda M3 router software allows a hacker to cause a service failure.

The vulnerability of the formSetAccessCodeInfo function from goform/setAccessCodeData in the Tenda M3 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-4251

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

PT-2024-3251

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability has been found in the function formSetUplinkInfo of the file /goform/setUplinkInfo. The manipulation of the argument pingHostIp2 leads to a stack-based buffer overflow. This...

PT-2024-3252

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to a stack-based buffer overflow in the formOfflineSet function, specifically when handling the GO/ssidIndex parameter in the /goform/setStaOffline API endpoint. This can be...

CVE-2024-4243

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

PT-2024-3676

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue exists in the fromDhcpSetSer function of the /goform/DhcpSetSe file, caused by a stack-based buffer overflow when handling the dhcpStartIp, dhcpEndIp, dhcpGw, dhcpMask, dhcpLeaseTime,...

PT-2024-5120

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: The issue is related to a stack-based buffer overflow in the fromDhcpSetSer function of the /goform/DhcpSetSer file. This can be exploited by sending specially crafted POST requests, potentially...

PT-2024-5119

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: The issue is related to a stack-based buffer overflow in the formwrlSSIDget function of the /goform/wifiSSIDget file. This can be exploited by manipulating the ssidIndex argument, allowing a remote...

PT-2024-4572

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A critical issue has been found in the function formSetDeviceName of the file /goform/SetOnlineDevName, which is related to a stack-based buffer overflow. The manipulation of the argument devName can...

PT-2024-3677

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue exists due to a stack-based buffer overflow when handling the ssidIndex parameter in the /goform/wifiSSIDget and /goform/wifiSSIDset API endpoints. This can be exploited remotely,...

CVE-2024-4122

A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2024-4120

CVE-2024-4120 affects Tenda W15E (firmware 15.11.0.14). The vulnerability resides in the function formIPMacBindModify of /goform/modifyIpMacBind, where manipulating the arguments IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, or IPMacBindRuleRemark leads to a stack-based buffer overflow. The...

CVE-2024-4118

The CVE-2024-4118 entry affects Tenda W15E version 15.11.0.14. The vulnerability lies in the formIPMacBindAdd function of the /goform/addIpMacBind file, where manipulating the IPMacBindRule parameter triggers a stack-based buffer overflow. This can be exploited remotely, and public exploit inform...