437 matches found
CVE-2023-50984
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function...
CVE-2023-50984
CVE-2023-50984 affects the Tenda i29 router (v1.0.0.5, i29 series) due to a buffer overflow in the spdtstConfigAndStart function triggered by the ip parameter. The root cause is insufficient validation of the input length/size on the ip parameter, allowing a potential remote exploit. NVD/Red Hat/...
CVE-2023-50984: Out-of-bounds Write
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function...
CVE-2023-50992
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function...
PT-2023-8318
Name of the Vulnerable Software and Affected Versions Tenda i29 version 1.0 V1.0.0.5 Description The issue is related to a buffer overflow vulnerability in the spdtstConfigAndStart function of the Tenda i29 wireless access point's firmware. This vulnerability can be exploited by a remote attacker...
CVE-2023-50992: Out-of-bounds Write
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function...
Tenda i29 安全漏洞
The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a buffer overflow vulnerability that originates from the ip parameter of the spdtstConfigAndStart method failing to properly validate the length and size of the input data, which can be exploited by a...
CVE-2023-50992
CVE-2023-50992 affects the Tenda i29 router (version V1.0.0.5). A vulnerability in the setPing function allows a stack overflow via the ip parameter, potentially enabling arbitrary code execution. Public sources consistently describe a buffer/stack overflow in this function; no exploits are docum...
TOTOLINK X6000R IP Parameter Command Execution Vulnerability
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a command execution vulnerability that stems from the IP parameter of the setDiagnosisCfg component failing to properly filter constructed command special characters, commands, and so on...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
PT-2023-28825 · Totolink · Totolink X6000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R versions V9.4.0cu.652 B20230116 through V9.4.0cu.852 B20230719 Description: The issue allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component. Recommendations: For versions...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2023-43453: Improper Neutralization of Special Elements used in a Command
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2023-45575
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...
CVE-2023-45575
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...
D-Link DI-7003G Buffer Error Vulnerability
The D-Link DI-7003G is a wireless router from China-based D-Link. A security vulnerability exists in the D-Link DI-7003G, which can be exploited to execute arbitrary code via the ip parameter of the ipposition.asp function...
DTS Monitoring Operating System Command Injection Vulnerability
DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the ip parameter in the Ping check function being susceptible to operating system command injection...
PT-2023-24257
Name of the Vulnerable Software and Affected Versions DTS Monitoring version 3.57.0 Description An issue was discovered in the software where the ip parameter within the Ping check function is vulnerable to OS command injection, specifically blind command injection. Recommendations For DTS...