325 matches found
CVE-2021-27705
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...
CVE-2021-27707
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without...
CVE-2021-27706
Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without...
CVE-2021-27706
CVE-2021-27706 affects Tenda G1 and G3 routers. A buffer overflow in the IPMacBindIndex handling within the formIPMacBindDel path allows remote attackers to execute arbitrary code, via a crafted action/IPMacBindIndex request, because the parameter is passed to strcpy without bounds checking. This...
CVE-2021-27705
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...
CVE-2021-27705
The CVE-2021-27705 entry involves the Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN, where a buffer overflow in the formQOSRuleDel routine exists. Specifically, the function passes the qosIndex parameter directly to strcpy without bounds checking, enabling remote code execution. Mult...
CVE-2021-27706: Buffer Copy without Checking Size of Input
Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex "request. This occurs because the "formIPMacBindDel" function directly passes the parameter "IPMacBindIndex" to strcpy without...
CVE-2021-27705: Buffer Copy without Checking Size of Input
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"qosIndex "request. This occurs because the "formQOSRuleDel" function directly passes the parameter "qosIndex" to strcpy without limit...
PT-2021-17609
Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version V15.11.0.179502 CN Description: The issue allows remote attackers to execute arbitrary code via a crafted action/"IPMacBindIndex" request. This occurs because the formIPMacBindDel function directly passes the...
PT-2021-17608
Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version v15.11.0.179502 CN Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted action/"qosIndex " request. This occurs because the formQOSRuleDel function directly passe...
PT-2021-17610
Name of the Vulnerable Software and Affected Versions: Tenda G1 and G3 routers version v15.11.0.179502 CN Description: The issue allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex" request. This occurs because the formDelPortMapping function directly passes t...
Tenda G1 and G3 安全漏洞
Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action IPMacBindIndex request...
CVE-2021-27707: Buffer Copy without Checking Size of Input
Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.179502CN allows remote attackers to execute arbitrary code via a crafted action/"portMappingIndex "request. This occurs because the "formDelPortMapping" function directly passes the parameter "portMappingIndex" to strcpy without...
Command Execution Vulnerability in Tenda G1 Router of Shenzhen Jixiang Tenda Technology Co.
The Tenda G1 is an enterprise-class AP management router with a 100-person bandwidth. A command execution vulnerability exists in the Tenda G1 router of Shenzhen Jixiang Tenda Technology Company Limited, which can be exploited by an attacker to remotely execute commands...
CVE-2015-0949
The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...
Design/Logic Flaw
The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...
CVE-2015-0949
The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...
CVE-2015-0949
CVE-2015-0949 pertains to SMM (System Management Mode) call-outs that may run outside SMRAM in certain BIOS implementations (Dell Latitude E6430 A09, HP EliteBook 850 G1 L71 Ver. 01.09, and potentially others). Root cause: SMM code does not ensure function calls operate on SMRAM memory locations,...
CVE-2015-0949: Improper Privilege Management
The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...
PT-2020-7798
Name of the Vulnerable Software and Affected Versions: Dell Latitude E6430 BIOS version A09 HP EliteBook 850 G1 BIOS version L71 Ver. 01.09 Description: The System Management Mode SMM implementation in certain BIOS versions does not ensure that function calls operate on SMRAM memory locations. Th...