CVE-2024-30585: Stack-based Buffer Overflow

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function...

CVE-2024-30612

Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function...

CVE-2024-30612

The Tenda AC10U router (firmware version v15.03.06.48 ) is susceptible to a stack-based buffer overflow vulnerability within the formSetClientState function (accessible via /goform/SetClientState). The flaw is caused by the software failing to properly validate the length and size of input data f...

CVE-2024-30607

Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function...

CVE-2024-30595: Stack-based Buffer Overflow

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the deviceId parameter of the addWifiMacFilter function...

CVE-2024-30596: Out-of-bounds Read

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function...

CVE-2024-30607

The Tenda FH1203 (v2.0.1.6) dual-band wireless router is affected by a stack-based buffer overflow vulnerability in the deviceId parameter of the saveParentControlInfo function. The root cause is a failure to properly validate the length and size of the input data. An attacker could exploit this ...

CVE-2024-30607

Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function...

CVE-2024-30595

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the deviceId parameter of the addWifiMacFilter function...

CVE-2024-30595

The Tenda FH1202 wireless router, specifically version v1.2.0.14(408) , is susceptible to a stack-based buffer overflow vulnerability. The root cause is the addWifiMacFilter function's failure to properly validate the length of the input data for the deviceId parameter. A remote attacker can expl...

Tenda AC7 Buffer Overflow Vulnerability

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts 802.11ac standard and supports dual-band concurrent transmission with wireless rate up to 1167Mbps. Tenda AC7 suffers from a buffer overflow vulnerability, which originates from a buffer...

CVE-2024-2983: Stack-based Buffer Overflow

A vulnerability was found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a dual-band wireless router from the Tenda brand, designed for large homes, small offices, or business and leisure areas, and designed to provide stable wireless network coverage and high-speed transmission. The Tenda FH1202 suffers from a stack buffer overflow vulnerability...

CVE-2024-2900: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. This affects the function saveParentControlInfo of the file /goform/saveParentControlInfo. The manipulation of the argument deviceId/time/urls leads to stack-based buffer overflow. It is possible to initiate th...

CVE-2024-2806

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20multi. This affects the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceId/deviceMac leads to stack-based buffer overflow. It is possible to initiate the...

CVE-2024-2806: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20multi. This affects the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceId/deviceMac leads to stack-based buffer overflow. It is possible to initiate the...

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

Zyxel ATP Formatting String Error Vulnerability

Zyxel ATP is a firewall from China-based Zyxel. A formatting string error vulnerability exists in Zyxel ATP firmware versions 4.32 through 5.37 Patch 1, which originates from allowing authenticated IPSec VPN users to cause a denial of service to the deviceid daemon by sending a crafted hostname t...

CVE-2023-6399: Use of Externally-Controlled Format String

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

CVE-2024-0931: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49multiTDE01. This vulnerability affects the function saveParentControlInfo. The manipulation of the argument deviceId/time/urls leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has bee...