Tenda W30E formSetCfm Function Stack Buffer Overflow Vulnerability

The Tenda W30E is a wireless router developed by Tenda to provide a stable network connection for homes and small offices. A stack buffer overflow vulnerability exists in the formSetCfm function of the /goform/setcfm file in Tenda W30E version 1.0.1.25633. An attacker can exploit this vulnerabili...

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

CVE-2024-3905

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

Tenda AC500 安全漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow issue in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file. No details of the...

Tenda AC500 安全漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow in the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file. No details of the vulnerability are...

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

PT-2024-3217 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical issue affects the function formIPMacBindModify of the file /goform/modifyIpMacBind. The manipulation of the arguments IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, and...

PT-2024-13326 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.9 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the port parameter at the "goform/setVlanInfo" component. Recommendations: For Tenda AC500 version 2.0.1.9, consider...

PT-2024-3220 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical vulnerability was found in the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the arguments enable, level, and module leads to a stack-based buffer overflow...

PT-2024-3216

Name of the Vulnerable Software and Affected Versions Tenda W15E version 15.11.0.14 Description A critical issue affects the formIPMacBindDel function in the /goform/delIpMacBind file, where manipulation of the IPMacBindIndex argument leads to a stack-based buffer overflow. This can be exploited...

CVE-2023-46060: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

Tenda AC500 安全漏洞

Tenda AC500 is a Gigabit Port Access Controller from Tenda China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which is caused by a buffer overflow in the password parameter of the R7WebsSecurityHandler method of the /goform/execCommand file...

Tenda W20E 安全漏洞

The Tenda W20E is a wireless router developed by Tenda to provide wireless network connectivity and management capabilities. The Tenda W20E suffers from a stack buffer overflow vulnerability that originates from improper handling of the remoteIP parameter in the formSetRemoteWebManage function in...

Tenda W30E 操作系统命令注入漏洞

The Tenda W30E is a wireless router device that provides Internet access, wireless coverage and more. A command injection vulnerability exists in the formWriteFacMac function of the /goform/WriteFacMac file in version 1.0.1.25633 of the Tenda W30E, which can be exploited by an attacker to execute...

PT-2024-4783

Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical issue has been found, affecting the function sub 42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument time leads to a stack-based buffer overflow. This issue can be...

PT-2024-5056 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A critical issue was found in the function formSetCfm of the file "/goform/setcfm". The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. It is possible to initiate the...

PT-2024-4865 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: A critical vulnerability has been found in the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to a stack-based buffer overflow. It is possible t...

PT-2024-3768 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the frmL7PlotForm function of the file /goform/frmL7ProtForm. This can be exploited by manipulating the page argument, allowing a remote...

PT-2024-3758 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the fromRouteStatic function of the Tenda W30E router's software. This can be exploited by a remote attacker using a specially crafted POST...

PT-2024-3134 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: The issue is related to a stack-based buffer overflow in the formSetRebootTimer function of the /goform/SetRebootTimer API endpoint. This can be exploited by manipulating the rebootTime argument,...