CVE-2024-42948

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42940

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42969

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42948

The CVE-2024-42948 entry concerns Tenda FH1201, version 1.2.0.14 (408). The vulnerability is a stack overflow in the delno parameter used by the fromPptpUserSetting function, enabling a Denial of Service via a crafted POST request. Public sources consistently describe a DoS outcome without detail...

CVE-2024-42944

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42953

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30236 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is related to a stack overflow in the frmL7ImForm function via the page parameter. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the affected...

CVE-2024-42948

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42985

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42946

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

The CVE-2024-42987 entry concerns Tenda FH1206 v02.03.01.35. A stack-based buffer overflow occurs in the fromPptpUserAdd function, triggered by unsafe sprintf calls that process HTTP POST parameters modino, username, newpwd, and pptpdnetseg without proper length validation. Exploitation in the wi...

CVE-2024-42976

CVE-2024-42976 affects Tenda FH1206 v02.03.01.35. The issue is a stack overflow in the fromSafeClientFilter function triggered by the page parameter, permitting a crafted POST request to cause Denial of Service. Exploitation details/code are not provided in the documents. For remediation/workarou...

CVE-2024-42985

CVE-2024-42985 affects Tenda FH1206, specifically version 02.03.01.35, with a stack overflow in the fromNatlimit function triggered by the page parameter. A crafted POST request can cause a Denial of Service. Public sources in the connected documents describe the vulnerability’s root cause and im...

CVE-2024-42944

The CVE-2024-42944 entry relates to Tenda FH1201 firmware, specifically v1.2.0.14 (408). The associated documents describe a stack overflow in the fromNatlimit function triggered via the page parameter, enabling a crafted POST request to cause a Denial of Service. Affected software is the FH1201 ...

CVE-2024-42983

CVE-2024-42983 involves the Tenda FH1206 router, specifically version 02.03.01.35, which is affected by a stack overflow in the pptpPPW parameter within the fromAdvSetWan function. The vulnerability allows an attacker to trigger a Denial of Service (DoS) by sending a crafted POST request, with th...

CVE-2024-42942

CVE-2024-42942 affects Tenda FH1201 v1.2.0.14 (408). The vulnerability is a stack overflow in the frmL7ImForm function triggered via the page parameter, allowing a remote attacker to cause a Denial of Service with a crafted POST request. Impact is DoS; no information about code execution or broad...

CVE-2024-42983

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls...

CVE-2024-7707

A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow...

CVE-2024-7707 Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow

A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow...