PT-2024-30229 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is a stack overflow that allows attackers to cause a Denial of Service DoS via a crafted POST request. This is achieved by exploiting the Go parameter in the fromSafeUrlFilter function...

PT-2024-30221 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: The issue is related to a stack overflow via the mit pptpusrpw parameter in the fromWizardHandle function. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the...

CVE-2024-42984

CVE-2024-42984 affects Tenda FH1206 (v02.03.01.35). The flaw is a stack overflow in the fromP2pListFilter function triggered by the page parameter, enabling a crafted POST to cause a Denial of Service. No remediation details are provided in the connected documents.

CVE-2024-42984

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42981

The CVE-2024-42981 vulnerability affects Tenda FH1206 v02.03.01.35. Root cause: a stack overflow in the delno parameter of the fromPptpUserSetting function, exploitable via a crafted POST request, leading to Denial of Service. Connected sources consistently describe the same issue across multiple...

CVE-2024-42979

CVE-2024-42979 concerns Tenda FH1206 (v02.03.01.35) with a stack overflow in the frmL7ProtForm function triggered by the page parameter. The vulnerability allows a crafted POST request to cause a Denial of Service. Multiple sources (NVD, Red Hat, CNVD/CNNVD mirrors) corroborate the issue; no publ...

CVE-2024-42973

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30239 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is a stack overflow that allows attackers to cause a Denial of Service DoS via a crafted POST request. This is achieved by exploiting the pptpPPW parameter in the fromAdvSetWan function...

CVE-2024-42982

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls...

CVE-2024-42980

CVE-2024-42980 affects Tenda FH1206 v02.03.01.35, where a stack overflow in the frmL7ImForm function can be triggered by the page parameter, enabling a DoS via crafted POST requests. Concrete details across multiple sources confirm the affected version and vulnerability class; Red Hat/CNNVD/CVE l...

CVE-2024-42950

CVE-2024-42950 affects Tenda FH1201 router, specifically v1.2.0.14 (408). The root cause is a stack overflow in the fromSafeClientFilter function triggered by the Go parameter, enabling a Denial of Service via a crafted POST request. Documents consistently describe a DoS impact and do not provide...

CVE-2024-42955

CVE-2024-42955 affects Tenda FH1201 v1.2.0.14 (408). Reported vulnerability is a stack overflow in the fromSafeClientFilter function triggered via the page parameter, leading to a Denial of Service with a crafted POST request. Connected sources (NVD, Red Hat, CNVD, CNNVD, CVE records) consistentl...

CVE-2024-42968

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42940

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42940

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42943

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42968

The CVE-2024-42968 entry affects Tenda FH1206 v02.03.01.35, where a stack overflow is triggered by the Go parameter in the fromSafeUrlFilter function, allowing a DoS via a crafted POST request. The vulnerability is linked to a specific Go parameter handling path in fromSafeUrlFilter, with impact ...

CVE-2024-42950

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42974

CVE-2024-42974 affects Tenda FH1206 v02.03.01.35. A stack overflow in the fromwebExcptypemanFilter function is triggered by the page parameter, allowing DoS via a crafted POST request. No vendor patch/version is specified in the provided documents. A PT-Security report suggests a temporary workar...