Tenda i22 Router Data Compromise

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2024-7584: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.34687. Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...

Tenda i22 security vulnerabilities

The Tenda i22 is a dual-band ceiling-mounted wireless access point from Tenda. Tenda i22 /goform/apPortalPhoneAuth Handling formApPortalPhoneAuth A stack overflow vulnerability exists that can be exploited by a remote attacker to submit a special request that can crash the application or can be...