CVE-2024-32283: Improper Neutralization of Special Elements used in a Command

Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parameter...

PT-2024-24480

Name of the Vulnerable Software and Affected Versions Tenda AC7V1.0 version 15.03.06.44 Description The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This vulnerability is remotely exploitable. There are no known exploits at this time...

CVE-2024-32283

The Tenda FH1203 dual-band wireless router (version 2.0.1.6 ) is vulnerable to a command injection vulnerability within the formexeCommand function. The flaw exists because the cmdinput parameter fails to properly filter command special characters and other construct commands. An attacker exploit...

PT-2024-24481 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: The issue is related to a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This vulnerability allows for potential exploitation. Recommendations: For Tend...

Tenda FH1202 安全漏洞

Tenda FH1202 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a total transmission rate of 1200Mbps. The Tenda FH1202 suffers from a command injection vulnerability that stems from the cmdinput parameter of the formexeCommand method failing to properly filter...

PT-2024-2876

Name of the Vulnerable Software and Affected Versions Tenda AC500 version 2.0.1.91307 Description A critical vulnerability was found in the function formexeCommand of the file /goform/execCommand, which is related to a stack-based buffer overflow. The manipulation of the argument cmdinput can lea...

Tenda FH1205 formexeCommand method stack buffer overflow vulnerability

The Tenda FH1205 is a home wireless router from China's Tenda, geared toward the average home network environment, providing wireless connectivity. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the...

Tenda FH1203 formexeCommand Method Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the cmdinput parameter of the formexeCommand method of the /goform/execCommand file that fails to correctly...

CVE-2024-2990

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

CVE-2024-2990

CVE-2024-2990 affects Tenda FH1203 2.0.1.6 . The vulnerability is in the function formexeCommand of the file /goform/execCommand where manipulation of the argument cmdinput causes a stack-based buffer overflow . It can be exploited remotely, and the exploit has been disclosed publicly. The connec...

PT-2024-23044 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue has been found in the Tenda FH1202 router, affecting the formexeCommand function in the /goform/execCommand file. The manipulation of the cmdinput argument leads to a stack-based...

PT-2024-23186

Name of the Vulnerable Software and Affected Versions Tenda FH1205 version 2.0.0.7775 Description A critical vulnerability was found in the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to a stack-based buffer overflow. It is possible to...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1202 formexeCommand method, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

CVE-2024-3008: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7775. Affected is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to launch the attack remotely. The explo...

CVE-2024-2990: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. This affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

CVE-2024-2980: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14408. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The...

Tenda AC10U formexeCommand function buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit router with 802.11ac Wave 2.0 standard, supporting MU-MIMO technology with high through-wall capability and stable transmission characteristics. The Tenda AC10U suffers from a buffer overflow vulnerability, which originates from the cmdinput parameter of the...

The vulnerability of the formexeCommand() function (/goform/execCommand) in the Tenda AC18 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC18 router’s microprogramming system lies in the issue of the operation exceeding the buffer boundaries in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromi...

CVE-2024-2708: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...

Tenda AC18 formexeCommand function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. Tenda AC18 V15.03.05.05 version of the buffer overflow vulnerability, the vulnerability stems from /goform/execCommand file formexeCommand function of the cmdinput parameter fails to correctly validate the length of the input data size, a...