PT-2024-2461 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: The issue is related to a stack overflow vulnerability in the fromDhcpListClient function, specifically with the list1 parameter. This vulnerability can be exploited by a remote attacker to impact the...

CVE-2024-3009

CVE-2024-3009 affects Tenda FH1205 firmware v2.0.0.7(775). The vulnerability lies in the function formWriteFacMac in the file /goform/WriteFacMac, where manipulating the mac argument leads to command injection. This can be triggered remotely over a network with no user interaction, and public exp...

CVE-2024-3008

A vulnerability, which was classified as critical, was found in Tenda FH1205 2.0.0.7775. Affected is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. It is possible to launch the attack remotely. The explo...

CVE-2024-2993

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2993 Tenda FH1203 QuickIndex formQuickIndex stack-based overflow

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been classified as critical. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2991

A vulnerability has been found in Tenda FH1203 2.0.1.6 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-2990

CVE-2024-2990 affects Tenda FH1203 2.0.1.6 . The vulnerability is in the function formexeCommand of the file /goform/execCommand where manipulation of the argument cmdinput causes a stack-based buffer overflow . It can be exploited remotely, and the exploit has been disclosed publicly. The connec...

CVE-2024-2985

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-2977

A vulnerability was found in Tenda F1203 2.0.1.6. It has been rated as critical. Affected by this issue is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be launched remotely. The...

Tenda FH1202 命令注入漏洞

The Tenda FH1202 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1202 version 1.2.0.14408, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a dual-band wireless router from the Tenda brand, designed for large homes, small offices, or business and leisure areas, and designed to provide stable wireless network coverage and high-speed transmission. The Tenda FH1202 suffers from a stack buffer overflow vulnerability...

Tenda F1203 安全漏洞

The Tenda F1203 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda F1203 version 2.0.1.6, which originates from the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file that fails to correctly validate the length of t...

The vulnerability of the fromSysToolReboot() function (/goform/SysToolReboot) in the Tenda AC15 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC15 router’s microprogramming software is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a remote attacker to cause service...

Tenda FH1203 安全漏洞

The Tenda FH1203 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1203 version 2.0.1.6 due to a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

Tenda F1203 安全漏洞

The Tenda F1203 is a wireless router from Tenda, a Chinese company. The Tenda F1203 version 2.0.1.6 suffers from a buffer overflow vulnerability, which originates from the failure of the password parameter of the R7WebsSecurityHandler method of the /goform/execCommand file to correctly validate t...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file...

PT-2024-23033 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A critical issue was found in the setSchedWifi function of the file /goform/openSchedWifi. The manipulation of the arguments schedStartTime and schedEndTime leads to a stack-based buffer overflow. This...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the page parameter of the fromNatStaticSetting method of the /goform/NatStaticSetting file...

PT-2024-23022 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A critical issue has been found that affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. This issue can be...

PT-2024-23044 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical issue has been found in the Tenda FH1202 router, affecting the formexeCommand function in the /goform/execCommand file. The manipulation of the cmdinput argument leads to a stack-based...