CVE-2024-42950

CVE-2024-42950 affects Tenda FH1201 router, specifically v1.2.0.14 (408). The root cause is a stack overflow in the fromSafeClientFilter function triggered by the Go parameter, enabling a Denial of Service via a crafted POST request. Documents consistently describe a DoS impact and do not provide...

CVE-2024-42951: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the mitpptpusrpw parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42950

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-30221 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: The issue is related to a stack overflow via the mit pptpusrpw parameter in the fromWizardHandle function. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the...

PT-2024-30239 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is a stack overflow that allows attackers to cause a Denial of Service DoS via a crafted POST request. This is achieved by exploiting the pptpPPW parameter in the fromAdvSetWan function...

CVE-2024-42968

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

Tenda FH1206 v02.03.01.35 was discovered to contain a stack-based buffer overflow vulnerability in the fromPptpUserAdd function. The vulnerability can be triggered via the modino, username, newpwd, or pptpdnetseg parameters, all of which are passed via HTTP POST and used in unsafe sprintf calls...

CVE-2024-42969

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42952

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42942

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42973

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42940

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42945

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42948

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42946

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42944

The CVE-2024-42944 entry relates to Tenda FH1201 firmware, specifically v1.2.0.14 (408). The associated documents describe a stack overflow in the fromNatlimit function triggered via the page parameter, enabling a crafted POST request to cause a Denial of Service. Affected software is the FH1201 ...

CVE-2024-42979

CVE-2024-42979 concerns Tenda FH1206 (v02.03.01.35) with a stack overflow in the frmL7ProtForm function triggered by the page parameter. The vulnerability allows a crafted POST request to cause a Denial of Service. Multiple sources (NVD, Red Hat, CNVD/CNNVD mirrors) corroborate the issue; no publ...

CVE-2024-42973

CVE-2024-42973 involves a stack overflow in the Tenda FH1206 router (v02.03.01.35) triggered by the page parameter in the fromSetlpBind function. A crafted POST request can cause a Denial of Service. The available documents identify the affected device and the vulnerable function but do not provi...

CVE-2024-42955

CVE-2024-42955 affects Tenda FH1201 v1.2.0.14 (408). Reported vulnerability is a stack overflow in the fromSafeClientFilter function triggered via the page parameter, leading to a Denial of Service with a crafted POST request. Connected sources (NVD, Red Hat, CNVD, CNNVD, CVE records) consistentl...

CVE-2024-42983

CVE-2024-42983 involves the Tenda FH1206 router, specifically version 02.03.01.35, which is affected by a stack overflow in the pptpPPW parameter within the fromAdvSetWan function. The vulnerability allows an attacker to trigger a Denial of Service (DoS) by sending a crafted POST request, with th...