The vulnerability of the formQuickIndex() function (/goform/QuickIndex) in the Tenda AC15 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formQuickIndex function /goform/QuickIndex of the Tenda AC15 router’s software lies in the fact that the operation outputs data beyond the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability allows an attacker to compromise the...

PT-2024-23011 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A critical issue affects the formQuickIndex function of the file /goform/QuickIndex. The manipulation of the PPPOEPassword argument leads to a stack-based buffer overflow. This issue can be exploited...

CVE-2024-2891

A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-2808

A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20multi. This issue affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be initiate...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a stack buffer overflow...

Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers PPPoE DoS (cisco-sa-iosxr-pppma-JKWFgneW)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the...

The vulnerability of the formQuickIndex function in the /goform/QuickIndex file of the Tenda AC18 router’s microprogramming system allows a hacker to escalate their privileges.

The vulnerability of the formQuickIndex function in the /goform/QuickIndex module of the Tenda AC18 router’s microprogramming system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to enhance their privileges ...

CVE-2024-2486

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. Th...

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack-based buffer overflow in the PPPOEPassword parameter of the formQuickIndex function of the /goform/QuickIndex file...

PT-2024-2176 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formQuickIndex function of the /goform/QuickIndex file, allowing for a stack-based buffer overflow through the manipulation of the PPPOEPassword argument. This can be...

PT-2024-2403 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical issue has been found in the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to a stack-based buffer...

CVE-2024-20327

A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the pppma process, resulting in a denial of service DoS condition. This vulnerability is du...

Design/Logic Flaw

A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the pppma process, resulting in a denial of service DoS condition. This vulnerability is du...

CVE-2024-20327

A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the pppma process, resulting in a denial of service DoS condition. This vulnerability is du...

CVE-2024-20327

Cisco IOS XR Software for ASR 9000 Series (PPPoE termination) is affected by CVE-2024-20327. The issue arises from improper handling of malformed PPPoE packets on a router running BNG PPPoE termination on Lightspeed-based line cards, allowing an unauthenticated adjacent attacker to crash the ppp_...

CVE-2024-20327

A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the pppma process, resulting in a denial of service DoS condition. This vulnerability is du...

Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers PPPoE Denial of Service Vulnerability

A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the pppma process, resulting in a denial of service DoS condition. This vulnerability is du...

CVE-2024-0997

A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. Affected by this issue is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. The attack may be launched remotely...

PT-2024-1311 · Totolink · Totolink N200Re

Name of the Vulnerable Software and Affected Versions: Totolink N200RE version 9.3.5u.6139 B20201216 Description: A critical issue was found in the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi, where the manipulation of the argument pppoeUser leads to a stack-based buffer overflow. This...

TOTOLINK LR1200GB setOpModeCfg function buffer overflow vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's TOTOLINK Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability that originates from the pppoeUser parameter of the setOpModeCfg function of...