Lucene search
+L

90 matches found

CVE
CVE
•added 2024/03/28 12:00 a.m.•96 views

CVE-2024-30612

The Tenda AC10U router (firmware version v15.03.06.48 ) is susceptible to a stack-based buffer overflow vulnerability within the formSetClientState function (accessible via /goform/SetClientState). The flaw is caused by the software failing to properly validate the length and size of input data f...

8.1CVSS7.3AI score0.00667EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•1 views

CVE-2024-2983: Stack-based Buffer Overflow

A vulnerability was found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this issue is the function formSetClientState of the file /goform/SetClientState. The manipulation of the argument deviceId/limitSpeed/limitSpeedUp leads to stack-based buffer overflow. The attack may be...

9CVSS6.2AI score0.01755EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•22 views

PT-2024-23069 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue was found in the function formSetClientState of the file /goform/SetClientState. The manipulation of the arguments deviceId, limitSpeed, and limitSpeedUp leads to a stack-based...

9CVSS8.8AI score0.01755EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
•added 2023/10/05 12:00 a.m.•13 views

The vulnerability of the formSetClientState() function in the Tenda AC10U router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetClientState function in Tenda AC10U router software stems from the operation of writing data outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS8AI score0.01088EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2023/09/28 12:00 a.m.•18 views

Tenda AC10U formSetClientState function stack buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. Tenda AC10U suffers from a stack buffer overflow vulnerability,...

9.8CVSS8AI score0.01088EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/09/27 3:19 p.m.•11 views

CVE-2023-44021

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the formSetClientState function...

9.8CVSS5.9AI score0.01088EPSS
SaveExploits0References2
NVD
NVD
•added 2023/09/27 3:19 p.m.•32 views

CVE-2023-44021

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the formSetClientState function...

9.8CVSS9.7AI score0.01088EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/27 3:19 p.m.•16 views

CVE-2023-44021

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the formSetClientState function...

9.8CVSS5.9AI score0.01088EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/27 3:19 p.m.•32 views

Stack overflow

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the formSetClientState function...

7.5CVSS9.6AI score0.01088EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/09/27 12:00 a.m.•17 views

Tenda AC10 缓冲区错误漏洞

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. Tenda AC10U suffers from a stack buffer overflow vulnerability,...

9.8CVSS7.8AI score0.01088EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/27 12:00 a.m.•23 views

PT-2023-5671 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 1.0 US AC10UV1.0RTL V15.03.06.49 multi TDE01 Description: The issue is related to a stack overflow via the formSetClientState function, which can be exploited by a remote attacker to impact the confidentiality, integrity,...

9.8CVSS9.5AI score0.01088EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/09/27 12:00 a.m.•37 views

CVE-2023-44021

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the formSetClientState function...

9.9AI score0.01088EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/27 12:00 a.m.•1 views

CVE-2023-44021: Improper Restriction of Operations within the Bounds of a Memory Buffer

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the formSetClientState function...

9.8CVSS8.3AI score0.01088EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/11 12:00 a.m.•15 views

The vulnerability of the formSetClientState() function in Tenda router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetClientState function in Tenda router software lies in the fact that the operation goes beyond the buffer in memory when processing the deviceId parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

10CVSS8.5AI score0.00838EPSS
SaveExploits1References3Affected Software8
BDU FSTEC
BDU FSTEC
•added 2023/08/09 12:00 a.m.•16 views

The vulnerability of the formSetClientState function in the microprogramming software for Tenda FH1203 allows a hacker to execute arbitrary code.

The vulnerability of the formSetClientState function in Tenda FH1203 router microprogramming software is related to the ability to write data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.01153EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2023/08/07 7:15 p.m.•18 views

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

9.8CVSS7.4AI score0.00838EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/07 7:15 p.m.•15 views

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

9.8CVSS5.9AI score0.00838EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/08/07 12:00 a.m.•45 views

CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

9.9AI score0.00838EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/08/07 12:00 a.m.•18 views

Tenda AC6 Buffer Error Vulnerability

Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15 .03.06.42multi, and FH1205 V2.0. A security vulnerability exists in version .0.7775, which...

9.8CVSS7.3AI score0.00838EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/07 12:00 a.m.•2 views

CVE-2023-38933: Out-of-bounds Write

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42multi, and FH1205 V2.0.0.7775 were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function...

9.8CVSS8.4AI score0.00838EPSS
SaveExploits1References2
Rows per page
Query Builder