CVE-2024-33211

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex...

Tenda AC8 安全漏洞

Shenzhen Jixiang Tengda Technology Co., Ltd AC8 is a wireless router device that provides network connection and wireless management functions. A stack buffer overflow vulnerability exists in the R7WebsSecurityHandler function in the Shenzhen Jixiang Tengda Technology Co. AC8 /goform/execCommand...

CVE-2024-33215

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat...

The vulnerability of the formSetCfm (/goform/setcfm) function in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetCfm /goform/setcfm function in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted POST request...

The vulnerability of the R7WebsSecurityHandler function (/goform/execCommand) in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

The vulnerability of the fromDhcpListClient function (/goform/DhcpListClient) in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...

Tenda W30E formSetCfm Function Stack Buffer Overflow Vulnerability

The Tenda W30E is a wireless router developed by Tenda to provide a stable network connection for homes and small offices. A stack buffer overflow vulnerability exists in the formSetCfm function of the /goform/setcfm file in Tenda W30E version 1.0.1.25633. An attacker can exploit this vulnerabili...

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

CVE-2024-3905

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

PT-2024-13326 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.9 Description: A Buffer Overflow issue allows a remote attacker to cause a denial of service via the port parameter at the "goform/setVlanInfo" component. Recommendations: For Tenda AC500 version 2.0.1.9, consider...

Tenda AC500 安全漏洞

Tenda AC500 is a Gigabit Port Access Controller from Tenda China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which is caused by a buffer overflow in the password parameter of the R7WebsSecurityHandler method of the /goform/execCommand file...

PT-2024-3220 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical vulnerability was found in the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the arguments enable, level, and module leads to a stack-based buffer overflow...

PT-2024-3217 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical issue affects the function formIPMacBindModify of the file /goform/modifyIpMacBind. The manipulation of the arguments IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, and...

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

Tenda AC500 安全漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow issue in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file. No details of the...

Tenda AC500 安全漏洞

The Tenda AC500 is a Gigabit port access controller from Tenda, China. A security vulnerability exists in Tenda AC500 version 2.0.1.91307, which originates from a buffer overflow in the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file. No details of the vulnerability are...

Tenda W20E 安全漏洞

The Tenda W20E is a wireless router developed by Tenda to provide wireless network connectivity and management capabilities. The Tenda W20E suffers from a stack buffer overflow vulnerability that originates from improper handling of the remoteIP parameter in the formSetRemoteWebManage function in...

PT-2024-4865 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: A critical vulnerability has been found in the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to a stack-based buffer overflow. It is possible t...

PT-2024-5056 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A critical issue was found in the function formSetCfm of the file "/goform/setcfm". The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. It is possible to initiate the...

PT-2024-3768 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: The issue is related to a stack-based buffer overflow in the frmL7PlotForm function of the file /goform/frmL7ProtForm. This can be exploited by manipulating the page argument, allowing a remote...