Lucene search
+L

99 matches found

Cvelist
Cvelist
•added 2024/04/23 12:00 a.m.•40 views

CVE-2024-33212

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm...

7.6AI score0.00661EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/23 12:00 a.m.•32 views

CVE-2024-33214

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic...

7.6AI score0.00623EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•4 views

PT-2024-25152

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.88155 EN Description A stack-based buffer overflow issue was discovered via the mitInterface parameter in the "ip/goform/RouteStatic" API endpoint. This issue can be exploited, potentially leading to unauthorized...

6.5CVSS6AI score0.00402EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2024/04/23 12:00 a.m.•21 views

CVE-2024-33211

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex...

7.8AI score0.00434EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•6 views

CVE-2024-33217: Stack-based Buffer Overflow

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat...

7.5CVSS6.3AI score0.00626EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•5 views

CVE-2024-33214: Buffer Copy without Checking Size of Input

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic...

7.5CVSS6.3AI score0.00623EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/23 12:00 a.m.•45 views

CVE-2024-33217

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat...

7.6AI score0.00626EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/23 12:00 a.m.•22 views

CVE-2024-33212

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm...

7.8AI score0.00661EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•6 views

CVE-2024-33211: Stack-based Buffer Overflow

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex...

7.3CVSS6.3AI score0.00434EPSS
SaveExploits1References2
CNVD
CNVD
•added 2023/05/18 12:00 a.m.•106 views

Tenda AC5 Code Execution Vulnerability

Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this...

9.8CVSS7.8AI score0.01998EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/16 3:15 p.m.•50 views

CVE-2023-31587

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

9.8CVSS9.9AI score0.01998EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/16 12:00 a.m.•118 views

CVE-2023-31587

CVE-2023-31587 affects Tenda AC5 router V15.03.06.28. A remote code execution (RCE) vulnerability exists via the Mac parameter at ip/goform/WriteFacMac, arising from insufficient input validation on the Mac field. Documented impact is arbitrary code execution with network access. Several sources ...

9.8CVSS9.9AI score0.01998EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/16 12:00 a.m.•52 views

CVE-2023-31587

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10AI score0.01998EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•4 views

CVE-2023-31587: Undefined Security Weakness

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

9.8CVSS6.4AI score0.01998EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/14 3:15 a.m.•648 views

CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10CVSS8AI score0.34842EPSS
SaveIn wildExploits1References2
NVD
NVD
•added 2022/06/14 3:15 a.m.•33 views

CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10CVSS0.34842EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/06/14 2:41 a.m.•46 views

CVE-2022-31446

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10AI score0.34842EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•3 views

CVE-2022-31446: Improper Neutralization of Special Elements used in an OS Command

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

10CVSS8.7AI score0.34842EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 1976/01/01 12:00 a.m.•27 views

CVE-2024-35340

Tenda FH1206 V1.2.0.88155 was discovered to contain a command injection vulnerability via the cmdinput parameter at ip/goform/formexeCommand...

8AI score0.01222EPSS
SaveExploits1References1
Rows per page
Query Builder