CVE-2024-0991

A vulnerability has been found in Tenda i6 1.0.0.93857 and classified as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-0990

A vulnerability, which was classified as critical, was found in Tenda i6 1.0.0.93857. This affects the function formSetAutoPing of the file /goform/setAutoPing of the component httpd. The manipulation of the argument ping1 leads to stack-based buffer overflow. It is possible to initiate the attac...

CVE-2024-0992

CVE-2024-0992 affects Tenda i6 1.0.0.9(3857) in the httpd component via the formwrlSSIDset function at /goform/wifiSSIDset. The index argument manipulation leads to a stack-based buffer overflow, enabling remote exploitation (attack vector: network; impact: high confidentiality, integrity, and av...

CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-0962

CVE-2024-0962 affects obgm libcoap 4.3.4. The vulnerability is in the function get_split_entry of src/coap_oscore.c (Configuration File Handler) and leads to a stack-based buffer overflow. The issue is exploitable remotely according to the description, and public disclosure of the exploit is note...

CVE-2024-0962 obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflow

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function getsplitentry of the file src/coaposcore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-0932

The vulnerability CVE-2024-0932 affects Tenda AC10U (firmware 15.03.06.49_multi_TDE01). The issue is a stack-based buffer overflow in setSmartPowerManagement caused by improper boundary checks on the time argument. It can be triggered remotely, with public exploits disclosed. Impact is described ...

CVE-2024-0931

CVE-2024-0931 affects Tenda AC10U, specifically the saveParentControlInfo function in version 15.03.06.49_multi_TDE01. The vulnerability is a stack-based buffer overflow triggered by manipulating deviceId/time/urls, with remote execution risk and a publicly disclosed exploit. Multiple sources (NV...

CVE-2024-0930

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49multiTDE01. This affects the function fromSetWirelessRepeat. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-0928

A vulnerability was found in Tenda AC10U 15.03.06.49multiTDE01. It has been declared as critical. Affected by this vulnerability is the function fromDhcpListClient. The manipulation of the argument page/listN leads to stack-based buffer overflow. The attack can be launched remotely. The exploit h...

CVE-2024-0930

The CVE-2024-0930 entry concerns a stack-based buffer overflow in Tenda AC10U firmware (version 15.03.06.49_multi_TDE01) via the fromSetWirelessRepeat function, caused by improper handling of the wpapsk_crypto argument. This allows remote attacker impact to confidentiality, integrity, and availab...

CVE-2024-0929

The CVE-2024-0929 issue affects Tenda AC10U devices running 15.03.06.49_multi_TDE01. Affected component is the fromNatStaticSetting function, where manipulation of the page argument enables a stack-based buffer overflow. This can be exploited remotely, with exploit details publicly disclosed (VDB...

CVE-2024-0928

CVE-2024-0928 concerns the Tenda AC10U device with firmware 15.03.06.49_multi_TDE01. The vulnerability is in the function fromDhcpListClient, where manipulation of the argument page/listN causes a stack-based buffer overflow. It is a network-facing issue with remote exploitation, and the exploit ...

CVE-2024-0926

A vulnerability was found in Tenda AC10U 15.03.06.49multiTDE01 and classified as critical. This issue affects the function formWifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the publi...

Stack overflow

A vulnerability was found in Tenda AC10U 15.03.06.49multiTDE01. It has been classified as critical. Affected is the function fromAddressNat. The manipulation of the argument entrys/mitInterface/page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit ha...

Stack overflow

A vulnerability was found in Tenda AC10U 15.03.06.49multiTDE01 and classified as critical. This issue affects the function formWifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the publi...

Stack overflow

A vulnerability has been found in Tenda AC10U 15.03.06.49multiTDE01 and classified as critical. This vulnerability affects the function formSetVirtualSer. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-0927

CVE-2024-0927 affects Tenda AC10U firmware 15.03.06.49_multi_TDE01. The vulnerability is a stack-based buffer overflow in the fromAddressNat function, triggered by the entrys/mitInterface/page parameter, allowing remote, unauthenticated exploitation. Multiple sources consistently describe remote ...

CVE-2024-0926

The CVE-2024-0926 entry concerns Tenda AC10U devices, specifically version 15.03.06.49_multi_TDE01, where the formWifiWpsOOB function is vulnerable. Root cause: manipulation of the index argument leads to a stack-based buffer overflow. Impact: remote exploitation, with potential confidentiality, ...