CVE-2024-2708 Tenda AC10U execCommand formexeCommand stack-based overflow

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...

CVE-2024-2708

CVE-2024-2708 affects Tenda AC10U, specifically the /goform/execCommand formexeCommand function. The vulnerability stems from a stack-based buffer overflow triggered by manipulating the cmdinput argument, potentially allowing a remote attacker to execute arbitrary code on the device. Public explo...

CVE-2024-2708 Tenda AC10U execCommand formexeCommand stack-based overflow

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...

CVE-2024-2705

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-2706 Tenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formWifiWpsStart of the file /goform/WifiWpsStart. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2024-2706

CVE-2024-2706 affects Tenda AC10U 15.03.06.49. The vulnerability is a stack-based overflow in the formWifiWpsStart function located in /goform/WifiWpsStart, triggered by manipulating the index argument. It enables remote initiation of an attack and has been publicly disclosed. Multiple sources (N...

CVE-2024-2706 Tenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formWifiWpsStart of the file /goform/WifiWpsStart. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2024-2705 Tenda AC10U SetNetControlList formSetQosBand stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-2705

CVE-2024-2705 affects Tenda AC10U 1.0/15.03.06.49. The vulnerability is a stack-based overflow in the formSetQosBand function of /goform/SetNetControlList caused by manipulation of the list argument, potentially enabling a remote attacker to compromise confidentiality, integrity, and availability...

CVE-2024-2704 Tenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflow

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49. Affected by this vulnerability is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2024-2704

CVE-2024-2704 affects Tenda AC10U (firmware 15.03.06.49). The vulnerable code path is formSetFirewallCfg in /goform/SetFirewallCfg, where manipulating the firewallEn argument triggers a stack-based buffer overflow. The description states the attack can be launched remotely and that the exploit ha...

CVE-2024-2703

CVE-2024-2703 affects Tenda AC10U firmware 15.03.06.49. The vulnerability is a stack-based overflow in the formSetDeviceName function of /goform/SetOnlineDevName caused by manipulation of the mac argument, with remote exploitation possible. Public exploit information is disclosed (VDB-257454). Mu...

CVE-2024-2703 Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit h...

CVE-2024-2703 Tenda AC10U SetOnlineDevName formSetDeviceName stack-based overflow

A vulnerability classified as critical has been found in Tenda AC10U 15.03.06.49. Affected is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit h...

CVE-2024-28574: Stack-based Buffer Overflow

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the opjj2kcopydefaulttcpandcreatetcd function when reading images in J2K format...

CVE-2024-2710: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-28567: Stack-based Buffer Overflow

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the FreeImageCreateICCProfile function when reading images in TIFF format...

CVE-2024-2711: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-28566: Stack-based Buffer Overflow

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the AssignPixel function when reading images in TIFF format...

CVE-2024-28568: Stack-based Buffer Overflow

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the readiptcprofile function when reading images in TIFF format...