TOTOLINK A6000R 安全漏洞

The TOTOLINK A6000R is a high-performance wireless router that utilizes advanced technology and design to provide users with an outstanding networking experience. TOTOLINK A6000R suffers from a command injection vulnerability, which originates from the devname parameter of the resetwifi function,...

CVE-2024-57225

CVE-2024-57225 affects Linksys E7350 router firmware

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC6 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the mac and devName parameters. Exploiting this vulnerability could...

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC15 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName in the Tenda AC15 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability could allow a...

The vulnerability of the formWifiBasicSet() function (/goform/SetOnlineDevName) in the Tenda A301 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function /goform/SetOnlineDevName of the Tenda A301 router’s software lies in the fact that the operation may go beyond the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2024-6403

A vulnerability, which was classified as critical, has been found in Tenda A301 15.13.08.12. Affected by this issue is the function formWifiBasicSet of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-6402

A vulnerability classified as critical was found in Tenda A301 15.13.08.12. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched remotely...

Tenda A301 安全漏洞

Tenda A301 is a wireless signal extender from Tenda, China. A buffer overflow vulnerability exists in Tenda A301 version 15.13.08.12, which is caused by the /goform/SetOnlineDevName parameter devName failing to correctly validate the length of the input data, and can be exploited by a remote...

PT-2024-6685 · Tenda · Tenda A301

Name of the Vulnerable Software and Affected Versions: Tenda A301 version 15.13.08.12 Description: A critical issue has been found in the function formWifiBasicSet of the file /goform/SetOnlineDevName, where the manipulation of the argument devName leads to a stack-based buffer overflow. This can...

UBUNTU-CVE-2021-47599

In the Linux kernel, the following vulnerability has been resolved: btrfs: use latestdev in btrfsshowdevname The test case btrfs/238 reports the warning below: WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfsshowdevname+0x104/0x1e8 btrfs CPU: 2 PID: 1 Comm: systemd Tainted: G W O...

Fedora: Security Advisory for rust-ifcfg-devname (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rust-ifcfg-devname-1.1.0-8.fc39

Udev helper utility that provides network interface naming using ifcfg config uration...

Fedora: Security Advisory for rust-ifcfg-devname (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-ifcfg-devname-1.1.0-8.fc40

Udev helper utility that provides network interface naming using ifcfg config uration...

Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which...

Tenda AX1806 安全漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 version 1.0.0.1 suffers from a buffer overflow vulnerability, which stems from the parameter devName failing to correctly validate the length of the input data, which can be exploited by a remote attacker ...

PT-2024-8485 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 Description: A critical issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to a stack-based buffer overflow in the memory. This can ...

Tenda AC7 安全漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC7 version 15.03.06.44 due to a buffer overflow in the devName parameter of the formSetDeviceName method...

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC18 router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName of the Tenda AC18 router’s software lies in the fact that the operation may escape out of the buffer in memory when processing the devName parameter. Exploiting this vulnerability could allow an attacker to compromise th...

CVE-2024-2487

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName/mac leads to stack-based buffer overflow. The attack can be initiated...