CVE-2024-30636

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function...

CVE-2024-30638

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function...

CVE-2023-38939

Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mitssid parameter in the formWrlsafeset function...

CVE-2023-38938

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...

CVE-2023-37715

Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm...

CVE-2023-37722

Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter...

CVE-2023-37723

Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting...

The vulnerability in the web interface for managing microprogrammed router software of the Tenda F1202 allows a hacker to increase their privileges.

The vulnerability in the web interface for managing Microprogramming Software Routers Tenda F1202 is related to deficiencies in access control when processing the end-point /goform/AdvSetWrlsafeset. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending...

The vulnerability of the configuration file default.cfg of the Tenda F1202 router microprogramming system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the configuration file default.cfg of the Tenda F1202 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the formSetDeviceName() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetDeviceName function in the Tenda F1202 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the deviceId parameter. Exploiting this vulnerability could allow a remote attacker to execut...

The vulnerability of the formQuickIndex() function in the Tenda F1202 router’s microprogramming software allows a hacker to compromise the accessibility of the protected information.

The vulnerability of the formQuickIndex function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability could allow a malicious actor to compromise th...

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to manipulate the accessibility of protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the accessibility ...

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the security5g parameter. Exploiting this vulnerability could allow a remote attacker to execute...

The vulnerability of the formSetDeviceName() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetDeviceName function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the deviceName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the formSetCfm() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-3875

A vulnerability was found in Tenda F1202 1.2.0.20408. It has been rated as critical. This issue affects the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2024-3877

A vulnerability classified as critical was found in Tenda F1202 1.2.0.20408. Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. The attack can be launched remotely. The exploi...

CVE-2024-3878

A vulnerability, which was classified as critical, has been found in Tenda F1202 1.2.0.20408. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be...

CVE-2024-3876

A vulnerability classified as critical has been found in Tenda F1202 1.2.0.20408. Affected is the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been...