CVE-2024-42942

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30221 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: The issue is related to a stack overflow via the mit pptpusrpw parameter in the fromWizardHandle function. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the...

CVE-2024-42981

The CVE-2024-42981 vulnerability affects Tenda FH1206 v02.03.01.35. Root cause: a stack overflow in the delno parameter of the fromPptpUserSetting function, exploitable via a crafted POST request, leading to Denial of Service. Connected sources consistently describe the same issue across multiple...

CVE-2024-42969

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42973

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42968

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42955

CVE-2024-42955 affects Tenda FH1201 v1.2.0.14 (408). Reported vulnerability is a stack overflow in the fromSafeClientFilter function triggered via the page parameter, leading to a Denial of Service with a crafted POST request. Connected sources (NVD, Red Hat, CNVD, CNNVD, CVE records) consistentl...

CVE-2024-42943

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42945

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42982

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42968

The CVE-2024-42968 entry affects Tenda FH1206 v02.03.01.35, where a stack overflow is triggered by the Go parameter in the fromSafeUrlFilter function, allowing a DoS via a crafted POST request. The vulnerability is linked to a specific Go parameter handling path in fromSafeUrlFilter, with impact ...

CVE-2024-42949

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42950

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42973

CVE-2024-42973 involves a stack overflow in the Tenda FH1206 router (v02.03.01.35) triggered by the page parameter in the fromSetlpBind function. A crafted POST request can cause a Denial of Service. The available documents identify the affected device and the vulnerable function but do not provi...

CVE-2024-42946

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls...

CVE-2024-42940

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42950

CVE-2024-42950 affects Tenda FH1201 router, specifically v1.2.0.14 (408). The root cause is a stack overflow in the fromSafeClientFilter function triggered by the Go parameter, enabling a Denial of Service via a crafted POST request. Documents consistently describe a DoS impact and do not provide...

CVE-2024-42980

CVE-2024-42980 affects Tenda FH1206 v02.03.01.35, where a stack overflow in the frmL7ImForm function can be triggered by the page parameter, enabling a DoS via crafted POST requests. Concrete details across multiple sources confirm the affected version and vulnerability class; Red Hat/CNNVD/CVE l...

CVE-2024-42974

CVE-2024-42974 affects Tenda FH1206 v02.03.01.35. A stack overflow in the fromwebExcptypemanFilter function is triggered by the page parameter, allowing DoS via a crafted POST request. No vendor patch/version is specified in the provided documents. A PT-Security report suggests a temporary workar...