Tenda FH1203 formSetCfm Method Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that stems from the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file failing to properly validate the length of...

Tenda FH1203 security vulnerabilities

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that stems from the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file failing to properly validate the length of...

Tenda FH1205 security vulnerabilities

The Tenda FH1205 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the funcpara1 parameter of the formSetCfm method of the /goform/setcfm file...

PT-2024-23022 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A critical issue has been found that affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to a stack-based buffer overflow. This issue can be...

PT-2024-2344 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.48 Description: A critical issue has been found in the function formSetCfm of the file goform/setcfm, where the manipulation of the argument funcpara1 leads to a stack-based buffer overflow. This can be exploited...

CVE-2024-0994

A vulnerability was found in Tenda W6 1.0.0.94122. It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be...

CVE-2024-0994 Tenda W6 httpd setcfm formSetCfm stack-based overflow

A vulnerability was found in Tenda W6 1.0.0.94122. It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be...

CVE-2024-0991

A vulnerability has been found in Tenda i6 1.0.0.93857 and classified as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated...

Tenda i9 Security Vulnerability

The Tenda i9 is a ceiling-mountable wireless access point from Tenda China. A security vulnerability exists in Tenda i9 version 1.0.0.9, which originates from a stack-based buffer overflow in the funcpara1 parameter of the formSetCfm function in /goform/setcfm...

PT-2024-1315

Name of the Vulnerable Software and Affected Versions Tenda i6 version 1.0.0.93857 Description A critical issue has been found in the formSetCfm function of the httpd component, specifically in the file /goform/setcfm. The manipulation of the funcpara1 argument leads to a stack-based buffer...

PT-2024-1310 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A critical issue affects the formSetCfm function of the httpd component, specifically in the /goform/setcfm file. The manipulation of the funcpara1 argument leads to a stack-based buffer overflow. Thi...

Exploit for Classic Buffer Overflow in Tenda Ac6_Firmware

CVE-2023-38823 Buffer Overflow in formSetCfm Affected mod...

Tenda i22 security vulnerabilities

The Tenda i22 is a wireless access point from Tenda China. A buffer overflow vulnerability exists in the Tenda i22 /goform/setcfm, which can be exploited by a remote attacker to submit a special request that can execute arbitrary code in the system context or crash the application...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31407)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. An attacker can exploit this vulnerability by sending the 'funcpara1' parameter to the /goform/setcfm URL to execute arbitrary code...

CVE-2020-13392

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...