CVE-2024-42968

The CVE-2024-42968 entry affects Tenda FH1206 v02.03.01.35, where a stack overflow is triggered by the Go parameter in the fromSafeUrlFilter function, allowing a DoS via a crafted POST request. The vulnerability is linked to a specific Go parameter handling path in fromSafeUrlFilter, with impact ...

CVE-2024-42948

The CVE-2024-42948 entry concerns Tenda FH1201, version 1.2.0.14 (408). The vulnerability is a stack overflow in the delno parameter used by the fromPptpUserSetting function, enabling a Denial of Service via a crafted POST request. Public sources consistently describe a DoS outcome without detail...

CVE-2024-42987

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls...

CVE-2024-42950

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42973

CVE-2024-42973 involves a stack overflow in the Tenda FH1206 router (v02.03.01.35) triggered by the page parameter in the fromSetlpBind function. A crafted POST request can cause a Denial of Service. The available documents identify the affected device and the vulnerable function but do not provi...

CVE-2024-42946

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42968

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42950

CVE-2024-42950 affects Tenda FH1201 router, specifically v1.2.0.14 (408). The root cause is a stack overflow in the fromSafeClientFilter function triggered by the Go parameter, enabling a Denial of Service via a crafted POST request. Documents consistently describe a DoS impact and do not provide...

CVE-2024-42974

CVE-2024-42974 affects Tenda FH1206 v02.03.01.35. A stack overflow in the fromwebExcptypemanFilter function is triggered by the page parameter, allowing DoS via a crafted POST request. No vendor patch/version is specified in the provided documents. A PT-Security report suggests a temporary workar...

CVE-2024-42987

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls...

CVE-2024-42946

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42944

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42953

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30236 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is related to a stack overflow in the frmL7ImForm function via the page parameter. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the affected...

CVE-2024-42948

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42985

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42983

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the pptpPPW parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

The CVE-2024-42987 entry concerns Tenda FH1206 v02.03.01.35. A stack-based buffer overflow occurs in the fromPptpUserAdd function, triggered by unsafe sprintf calls that process HTTP POST parameters modino, username, newpwd, and pptpdnetseg without proper length validation. Exploitation in the wi...

CVE-2024-42985

CVE-2024-42985 affects Tenda FH1206, specifically version 02.03.01.35, with a stack overflow in the fromNatlimit function triggered by the page parameter. A crafted POST request can cause a Denial of Service. Public sources in the connected documents describe the vulnerability’s root cause and im...

CVE-2024-42944

The CVE-2024-42944 entry relates to Tenda FH1201 firmware, specifically v1.2.0.14 (408). The associated documents describe a stack overflow in the fromNatlimit function triggered via the page parameter, enabling a crafted POST request to cause a Denial of Service. Affected software is the FH1201 ...