CVE-2024-2486 Tenda AC18 QuickIndex formQuickIndex stack-based overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. Th...

CVE-2024-2486: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. Th...

CVE-2024-0922

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49multiTDE01. Affected by this vulnerability is the function formQuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

PT-2024-1370 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: A critical vulnerability was found in the function formQuickIndex of the Tenda AC10U router's firmware. The manipulation of the argument PPPOEPassword leads to a stack-based buffer...

CVE-2024-0922: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49multiTDE01. Affected by this vulnerability is the function formQuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2022-45511

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

CVE-2022-45511

CVE-2022-45511 affects Tenda W30E V1.0.1.25(633). A stack overflow is triggered via the PPPOEPassword parameter at the /goform/QuickIndex API endpoint. Reported impact is high (availability impact), with network-exploitability and no privileges required. A PoC exists and may be automatable per th...

CVE-2022-45511

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

CVE-2022-45511

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

CVE-2022-45511: Out-of-bounds Write

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

CVE-2022-37815

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...

Stack overflow

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...

CVE-2022-37815

The CVE-2022-37815 entry concerns Tenda AC1206 V15.03.06.23, where a stack overflow is caused by improper boundary checking of the formQuickIndex function, triggered via the PPPOEPassword parameter. Public sources in the connected documents describe the vulnerability as a buffer/stack overflow th...

CVE-2022-37815

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...

PT-2022-24093

Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 Description A stack overflow issue was discovered via the PPPOEPassword parameter in the formQuickIndex function. This issue can potentially be exploited. Recommendations For Tenda AC1206 version 15.03.06.23,...

CVE-2022-37815: Out-of-bounds Write

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...

CVE-2022-26993: Improper Neutralization of Special Elements used in an OS Command

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the pppoeUserName, pppoePassword, and pppoeService parameters. This vulnerability allows attackers to execute arbitrary...