CVE-2024-4247

CVE-2024-4247 affects Tenda i21 (firmware 1.0.0.14(4656)). The vulnerability is in the formQosManage_auto function; manipulating the ssidIndex parameter triggers a stack-based buffer overflow. Exploitation is described as remote. Connected advisories reiterate the same details and point to VDB-26...

CVE-2024-4247 Tenda i21 formQosManage_auto stack-based overflow

A vulnerability has been found in Tenda i21 1.0.0.144656 and classified as critical. This vulnerability affects the function formQosManageauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. VDB-262138 is the identifier...

CVE-2024-4247: Stack-based Buffer Overflow

A vulnerability has been found in Tenda i21 1.0.0.144656 and classified as critical. This vulnerability affects the function formQosManageauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. VDB-262138 is the identifier...

The vulnerability of the formQosManage_auto function in the wireless access point Tenda W9 software allows a intruder to execute any code they desire.

The vulnerability of the formQosManageauto function in the wireless access point software Tenda W9 relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2024-0538: Stack-based Buffer Overflow

A vulnerability has been found in Tenda W9 1.0.0.74456 and classified as critical. This vulnerability affects the function formQosManageauto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit h...

Tenda W9 安全漏洞

Tenda W9 is a wireless in-wall access point from Tenda, China. An out-of-bounds write vulnerability exists in Tenda W9 version 1.0.0.7, which is caused by a stack-based buffer overflow in the ssidIndex parameter of the formQosManageauto function. An attacker can exploit this vulnerability to inje...