CVE-2024-3011

A vulnerability was found in Tenda FH1205 2.0.0.7775. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...

PT-2024-2465 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a stack overflow vulnerability in the fromAddressNat function, specifically in the page parameter. This vulnerability can be exploited by a remote attacker using a speciall...

PT-2024-22774 · Svr-116 · Svr-116

Name of the Vulnerable Software and Affected Versions: SVR-116 firmware version 1.6.0.30028871 Description: The issue allows a remote authenticated attacker with administrative privileges to execute arbitrary OS commands by sending a specially crafted request to the product. Recommendations: For...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file...

CVE-2023-51146

Buffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admadduser action...

CVE-2023-51147

Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admmodpwd action...

CVE-2024-28551

Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of formfastsettingwifiset function...

CVE-2024-2893

A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2023-51146

CVE-2023-51146 concerns the TRENDnet AC1200 TEW-821DAP (firmware 3.00b06). Documents describe a buffer overflow in the adm_add_user action that could let an attacker execute arbitrary code on the device. Some sources do not provide exploitation status; no patch/version is confirmed in the materia...

CVE-2024-2809

A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20multi. Affected is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to launch the atta...

PT-2024-22867 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: DIR-845L router firmware version = 1.01KRb03 Description: A command injection issue exists in the cgibin binary. Recommendations: For DIR-845L router firmware version = 1.01KRb03, update to a version greater than 1.01KRb03 to resolve the issu...

CVE-2024-2742 OS Command Injection in Planet IGS-4215-16T2S

Operating system command injection vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. An authenticated attacker could execute arbitrary code on the remote host by exploiting IP address functionality...

CVE-2024-2741 Cross-Site Request Forgery in Planet IGS-4215-16T2S

Cross-Site Request Forgery CSRF vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to trick some authenticated users into performing actions in their session, such as adding or updating accounts through the Switch web...

CVE-2024-2162

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

CVE-2024-2162 Authenticated Remote Code Execution in Kiloview NDI N series products

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

PT-2024-2599 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical vulnerability was found in the function formQuickIndex of the file /goform/QuickIndex, which can be exploited remotely. The manipulation of the argument PPPOEPassword leads to a stack-base...

CVE-2024-2711

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be launched remotely...

DrayTek Vigor routers 安全漏洞

DrayTek Vigor routers are a series of routers from Taiwan's DrayTek Corporation DrayTek. A security vulnerability exists in Draytek Vigor3910 4.3.2.5 and earlier versions, which stems from a directory traversal vulnerability in processpost...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC10U version 15.03.06.49, which is caused by a stack-based buffer overflow in the firewallEn parameter of the formSetFirewallCfg function of /goform/SetFirewallCfg...

PT-2024-2497 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue affects the formWifiWpsStart function of the /goform/WifiWpsStart file, leading to a stack-based buffer overflow due to the manipulation of the index argument. This issue can be...