Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a command execution vulnerability that stems from a problem with the handler function in /goform/telnet, which can be exploited by an attacker to execute arbitrary commands via specially crafted HTTP requests...

CVE-2024-42943: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a stack overflow found in the page parameter of the frmL7ImForm function. An attacker can exploit this vulnerability to consume server resources for the purpo...

CVE-2024-42955: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42947

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2024-42953

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30219 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 408 Description: The issue is related to a stack overflow via the delno parameter in the fromPptpUserSetting function, allowing attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42945

CVE-2024-42945 affects Tenda FH1201 firmware v1.2.0.14 (408). A stack overflow in the fromAddressNat function is triggered by the page parameter, enabling a crafted POST to cause Denial of Service. Public sources corroborate a DoS impact from this vulnerability. A practical mitigation from PT Sec...

PT-2024-30221 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: The issue is related to a stack overflow via the mit pptpusrpw parameter in the fromWizardHandle function. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the...

PT-2024-30224

Name of the Vulnerable Software and Affected Versions Tenda FH1201 version 1.2.0.14 Description The issue is related to a stack overflow vulnerability via the page parameter in the fromwebExcptypemanFilter function. This allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42943

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-6511

Name of the Vulnerable Software and Affected Versions Tenda FH1201 version 1.2.0.14 408 Description The issue is related to a stack overflow in the fromSafeClientFilter function, which can be triggered via the Go parameter. This allows attackers to cause a Denial of Service DoS by sending a craft...

CVE-2024-42947

The CVE-2024-42947 entry concerns Tenda FH1201 v1.2.0.14. A vulnerability in the /goform/telnet handler allows an attacker to execute arbitrary commands through a crafted HTTP request, enabling remote command execution with network access. This is evidenced by several connected sources referencin...

CVE-2024-42946

CVE-2024-42946 affects Tenda FH1201 1.2.0.14 (408). The vulnerability is a stack overflow in the fromVirtualSer function triggered via the page parameter, enabling DoS through a crafted POST request. Documented impact is Denial of Service; no exploitation details are provided in the initial descr...

CVE-2024-42946: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30215

Name of the Vulnerable Software and Affected Versions Tenda FH1201 version 1.2.0.14 Description The issue is a stack overflow that allows attackers to cause a Denial of Service DoS via a crafted POST request. This is achieved through the page parameter in the frmL7ImForm function. Recommendations...

CVE-2024-42953

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42954: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42942

CVE-2024-42942 affects Tenda FH1201 v1.2.0.14 (408). The vulnerability is a stack overflow in the frmL7ImForm function triggered via the page parameter, allowing a remote attacker to cause a Denial of Service with a crafted POST request. Impact is DoS; no information about code execution or broad...

CVE-2024-42941: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...