PT-2026-35342

A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the...

The vulnerability of the fromAdvSetWan() function (/goform/AdvSetWan) in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the fromAdvSetWan function /goform/AdvSetWan of the Tenda FH1201 router software is related to the operation that goes beyond the buffer in memory when processing the PPPOepassword parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

CVE-2024-42983: Out-of-bounds Write

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42941

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...