Tenda i9 formSetCfm DoS

The vulnerability of the formSetCfm function in the httpd daemon of the microprogrammed wireless access points from Tenda i9 is related to the operation that goes beyond the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow a malicious actor to...

Tenda i6 formSetCfm HTTPD Heap Buffer Overflow

The vulnerability of the formSetCfm function in the httpd daemon of the microprogrammed wireless access points from Tenda i6 is related to the operation that goes beyond the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow an attacker to compromi...

Tenda W6 formSetCfm Function Remote Compromise

The vulnerability of the formSetCfm function in the httpd daemon of the microprogrammed wireless access points of Tenda W6 is related to the operation that goes beyond the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow an attacker to compromise...

CVE-2024-0996: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda i9 1.0.0.94122. This affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...

PT-2024-1315

Name of the Vulnerable Software and Affected Versions Tenda i6 version 1.0.0.93857 Description A critical issue has been found in the formSetCfm function of the httpd component, specifically in the file /goform/setcfm. The manipulation of the funcpara1 argument leads to a stack-based buffer...

PT-2024-1308

Name of the Vulnerable Software and Affected Versions Tenda i9 version 1.0.0.94122 Description A critical vulnerability has been found in the Tenda i9, affecting the formSetCfm function of the httpd component, specifically in the file /goform/setcfm. The manipulation of the funcpara1 argument lea...

CVE-2022-45665

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2022-45665

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

Buffer overflow

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

PT-2022-27607

Name of the Vulnerable Software and Affected Versions Tenda i22 version 1.0.0.34687 Description A buffer overflow issue was discovered via the funcpara1 parameter in the formSetCfm function. This allows for potential exploitation. Recommendations For Tenda i22 version 1.0.0.34687, as a temporary...

CVE-2022-45665

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2022-45665

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2022-45665: Buffer Copy without Checking Size of Input

Tenda i22 V1.0.0.34687 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31407)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. An attacker can exploit this vulnerability by sending the 'funcpara1' parameter to the /goform/setcfm URL to execute arbitrary code...