CVE-2024-34020

A stack-based buffer overflow exists in the putSDN() function of mail.c within the hcode online assessment platform (versions 2.1 and earlier ). The root cause is that the static variable cp is used as an index for a fixed-sized buffer ibuf. Although a range check exists, under certain circumstan...

CVE-2024-34020: Stack-based Buffer Overflow

A stack-based buffer overflow was found in the putSDN function of mail.c in hcode through 2.1...

Unspecified vulnerability in Tenda A301 (CNVD-2024-23302)

Tenda A301 is a wireless signal extender from Tenda, China. A security vulnerability exists in Tenda A301 version 15.13.08.12multiTDE01, which stems from a parameter deviceList in file /goform/setBlackRule that can cause a stack-based buffer overflow. No details of the vulnerability are available...

Unspecified vulnerability in Tenda i21 (CNVD-2024-23294)

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Tenda W9 (CNVD-2024-23316)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this tim...

Unspecified vulnerability in Tenda i21 (CNVD-2024-23296)

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Tenda i22 (CNVD-2024-23301)

The Tenda i22 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i22 version 1.0.0.34687, which stems from an incorrect operation of the parameter groupIndex that can lead to a stack-based buffer overflow. No details of the vulnerability are provided at this tim...

Unspecified vulnerability in Tenda i21 (CNVD-2024-23299)

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect manipulation of the parameter ssidIndex that can lead to a stack-based buffer overflow. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in Tenda W9 (CNVD-2024-23315)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect manipulation of the parameter ssidIndex that can lead to a stack-based buffer overflow. No detailed vulnerability details are provided at...

Unspecified Vulnerability in Tenda W9 (CNVD-2024-23293)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 that can result in a stack-based buffer...

Unspecified vulnerability in Tenda i21 (CNVD-2024-23295)

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version 1.0.0.144656, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this time...

CVE-2024-4252

A vulnerability classified as critical has been found in Tenda i22 1.0.0.34687. This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2024-4252 Tenda i22 formSetUrlFilterRule stack-based overflow

A vulnerability classified as critical has been found in Tenda i22 1.0.0.34687. This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2024-4251

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

CVE-2024-4251

CVE-2024-4251 affects Tenda i21 1.0.0.14(4656). The flaw is in the function fromDhcpSetSer of the file /goform/DhcpSetSe, where manipulation of the arguments dhcpStartIp, dhcpEndIp, dhcpGw, dhcpMask, dhcpLeaseTime, dhcpDns1, and dhcpDns2 leads to a stack-based buffer overflow. Impact is described...

CVE-2024-4249

The CVE-2024-4249 entry affects Tenda i21 firmware 1.0.0.14(4656). The vulnerable component is the function formwrlSSIDget in the file /goform/wifiSSIDget, where manipulating the argument ssidIndex causes a stack-based buffer overflow. The vulnerability can be exploited remotely, and public explo...

CVE-2024-4248 Tenda i21 formQosManage_user stack-based overflow

A vulnerability was found in Tenda i21 1.0.0.144656 and classified as critical. This issue affects the function formQosManageuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely. The associated identifier of this vulnerability...

CVE-2024-4247

A vulnerability has been found in Tenda i21 1.0.0.144656 and classified as critical. This vulnerability affects the function formQosManageauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. VDB-262138 is the identifier...

CVE-2024-4247

CVE-2024-4247 affects Tenda i21 (firmware 1.0.0.14(4656)). The vulnerability is in the formQosManage_auto function; manipulating the ssidIndex parameter triggers a stack-based buffer overflow. Exploitation is described as remote. Connected advisories reiterate the same details and point to VDB-26...

CVE-2024-4246

A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.144656. This affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The identifier VDB-262137 was...