Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from the page parameter of ip/goform/DhcpListClient failing to properly validate the length of the input data, which can be exploited by an attacker to cause a...

CVE-2024-34942

Tenda FH1206 router (firmware 1.2.0.8(8155) EN) contains a stack-based buffer overflow in the ip/goform/exeCommand endpoint, triggered by the funcpara1 parameter. This could allow arbitrary code execution or a denial of service. Exploitation status is not provided in the documents; no exploit det...

CVE-2024-34943

CVE-2024-34943 affects Tenda FH1206 router (version 1.2.0.8(8155) EN). The vulnerability is a stack-based buffer overflow in the ip/goform/NatStaticSetting endpoint via the page parameter due to input length validation issues, enabling potential remote code execution or denial of service. Public ...

CVE-2024-34944

The CVE-2024-34944 affects Tenda FH1206 firmware version 1.2.0.8(8155) EN. A stack-based buffer overflow is triggered via the list1 parameter at the ip/goform/DhcpListClient endpoint due to insufficient input length validation. Impact is high on confidentiality, integrity, and availability (per C...

CVE-2024-34946

CVE-2024-34946 affects the Tenda FH1206 router (version 1.2.0.8(8155) EN). The root cause is a stack-based buffer overflow in the page parameter of ip/goform/DhcpListClient, exposing the device to memory corruption and potential remote impact. Public sources describe exploitation that could lead ...

PT-2024-5190 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: The issue is related to a stack-based buffer overflow via the list1 parameter at the "ip/goform/DhcpListClient" endpoint. This can be exploited by a remote attacker to impact the confidentialit...

PT-2024-26262 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: A stack-based buffer overflow issue was found via the PPW parameter at the "ip/goform/WizardHandle" API endpoint. Recommendations: For Tenda FH1206 version 1.2.0.88155 EN, avoid using the PPW...

PT-2024-26261 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: A stack-based buffer overflow issue was found via the funcpara1 parameter at the "ip/goform/exeCommand" endpoint. Recommendations: For Tenda FH1206 version 1.2.0.88155 EN, avoid using the...

PT-2024-3755 · D Link · D-Link Dir-619L Rev.B

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: The issue is related to a buffer overflow vulnerability in the /bin/boa component of the D-Link DIR-619L Rev.B router, specifically via the "goform/formWPS" endpoint, where the webpage paramet...

PT-2024-3636 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 EN Description: The issue is related to a stack-based buffer overflow via the page parameter at the "ip/goform/DhcpListClient" endpoint. This can be exploited by sending a specially crafted POST request,...

The vulnerability of the sub_42C014() function (/goform/PowerSaveSet) in the Tenda TX9 Pro router’s microprogramming system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42C014 function /goform/PowerSaveSet of the Tenda TX9 Pro router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability can allow an attacker to compromise the...

CVE-2024-4492

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.144656. This issue affects the function formOfflineSet of the file /goform/setStaOffline. The manipulation of the argument GO/ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely...

The vulnerability of the formSetAccessCodeInfo function (goform/setAccessCodeData) in the Tenda M3 router software allows a hacker to cause a service failure.

The vulnerability of the formSetAccessCodeInfo function from goform/setAccessCodeData in the Tenda M3 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-4251

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

CVE-2024-4243

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4122

A vulnerability classified as critical was found in Tenda W15E 15.11.0.14. Affected by this vulnerability is the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2024-4120

CVE-2024-4120 affects Tenda W15E (firmware 15.11.0.14). The vulnerability resides in the function formIPMacBindModify of /goform/modifyIpMacBind, where manipulating the arguments IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, or IPMacBindRuleRemark leads to a stack-based buffer overflow. The...

CVE-2024-4118

The CVE-2024-4118 entry affects Tenda W15E version 15.11.0.14. The vulnerability lies in the formIPMacBindAdd function of the /goform/addIpMacBind file, where manipulating the IPMacBindRule parameter triggers a stack-based buffer overflow. This can be exploited remotely, and public exploit inform...

Tenda TX9 安全漏洞

Tenda TX9 Pro is a dual-band Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda TX9 version 22.03.02.10, which originates from a buffer overflow vulnerability in the time parameter of the sub42BD7C method of the /goform/SetLEDCfg file...

Tenda W15E 安全漏洞

Tenda W15E is a wireless router from Tenda China. A security vulnerability exists in Tenda W15E version 15.11.0.14, which is caused by a buffer overflow vulnerability in the delDhcpIndex parameter of the formDelDhcpRule method of the /goform/DelDhcpRule file...