Tenda FH1203 formSetCfm Method Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that stems from the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file failing to properly validate the length of...

PT-2024-2466

Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14408 Description The issue is related to a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function, which can be exploited via a specially crafted POST request to the...

PT-2024-2464

Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14408 Description The issue is related to a stack overflow vulnerability in the addWifiMacFilter function, specifically in the deviceMac parameter, which can be exploited through a specially crafted POST request to t...

PT-2024-2554

Name of the Vulnerable Software and Affected Versions Tenda AC10U version 15.03.06.48 Description The issue is related to a stack overflow vulnerability in the formSetClientState function, specifically affecting the deviceId, limitSpeed, and limitSpeedUp parameters. This vulnerability can be...

PT-2024-2461 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is related to a stack overflow vulnerability in the fromDhcpListClient function, specifically with the list1 parameter. This vulnerability can be exploited by a remote attacker to impact the...

CVE-2024-3009

CVE-2024-3009 affects Tenda FH1205 firmware v2.0.0.7(775). The vulnerability lies in the function formWriteFacMac in the file /goform/WriteFacMac, where manipulating the mac argument leads to command injection. This can be triggered remotely over a network with no user interaction, and public exp...

CVE-2024-3008

A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7775. Affected is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to launch the attack remotely. The explo...

CVE-2024-2993

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2993 Tenda FH1203 QuickIndex formQuickIndex stack-based overflow

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2991

A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-2990

CVE-2024-2990 affects Tenda FH1203 2.0.1.6 . The vulnerability is in the function formexeCommand of the file /goform/execCommand where manipulation of the argument cmdinput causes a stack-based buffer overflow . It can be exploited remotely, and the exploit has been disclosed publicly. The connec...

CVE-2024-2985

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-2977

A vulnerability was found in Tenda F1203 2.0.1.6. It has been rated as critical. Affected by this issue is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be launched remotely. The...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the entrys parameter of the fromSetRouteStatic method of the /goform/fromRouteStatic file...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the page parameter of the fromNatStaticSetting method of the /goform/NatStaticSetting file...

Tenda FH1203 安全漏洞

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file that fails to correctly...

Tenda FH1203 安全漏洞

The Tenda FH1203 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1203 version 2.0.1.6 due to a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

Tenda FH1203 命令注入漏洞

The Tenda FH1203 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1203 version 2.0.1.6, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

Tenda F1203 安全漏洞

The Tenda F1203 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda F1203 version 2.0.1.6, which originates from the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file that fails to correctly validate the length of t...