CVE-2024-42948

The CVE-2024-42948 entry concerns Tenda FH1201, version 1.2.0.14 (408). The vulnerability is a stack overflow in the delno parameter used by the fromPptpUserSetting function, enabling a Denial of Service via a crafted POST request. Public sources consistently describe a DoS outcome without detail...

CVE-2024-42974

CVE-2024-42974 affects Tenda FH1206 v02.03.01.35. A stack overflow in the fromwebExcptypemanFilter function is triggered by the page parameter, allowing DoS via a crafted POST request. No vendor patch/version is specified in the provided documents. A PT-Security report suggests a temporary workar...

CVE-2024-42974

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromwebExcptypemanFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42949

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42979

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42982

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42946

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42976

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42955

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42969

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42943

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42977

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42986

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42949: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42976

CVE-2024-42976 affects Tenda FH1206 v02.03.01.35. The issue is a stack overflow in the fromSafeClientFilter function triggered by the page parameter, permitting a crafted POST request to cause Denial of Service. Exploitation details/code are not provided in the documents. For remediation/workarou...

CVE-2024-42969

CVE-2024-42969 affects Tenda FH1206 (v02.03.01.35). The provided sources describe a stack overflow in the page parameter of the fromSafeUrlFilter function, enabling a Denial of Service via a crafted POST request. The connected documents consistently report this vulnerability without additional te...

CVE-2024-42951

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the mitpptpusrpw parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42987

The CVE-2024-42987 entry concerns Tenda FH1206 v02.03.01.35. A stack-based buffer overflow occurs in the fromPptpUserAdd function, triggered by unsafe sprintf calls that process HTTP POST parameters modino, username, newpwd, and pptpdnetseg without proper length validation. Exploitation in the wi...

CVE-2024-42982

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42941

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the wanmode parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...