CVE-2024-2892

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The explo...

CVE-2024-2891

CVE-2024-2891 affects the Tenda AC7 (firmware 15.03.06.44). The issue resides in the function formQuickIndex of /goform/QuickIndex, where manipulating the PPPOEPassword argument causes a stack-based buffer overflow. This can be exploited remotely, and the exploit has been disclosed publicly (VDB-...

openSUSE: Security Advisory for vim (SUSE-SU-2024:0871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-2856

The CVE-2024-2856 vulnerability affects Tenda AC10 firmware 16.03.10.13/16.03.10.20. The issue is in the function fromSetSysTime of /goform/SetSysTimeCfg, where manipulating the timeZone parameter causes a stack-based buffer overflow. It can be triggered remotely and public exploits have been dis...

CVE-2024-2855

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20. Affected by this vulnerability is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-2852

A vulnerability was found in Tenda AC15 15.03.20multi. It has been declared as critical. This vulnerability affects the function saveParentControlInfo of the file /goform/saveParentControlInfo. The manipulation of the argument urls leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-2850 Tenda AC15 saveParentControlInfo stack-based overflow

A vulnerability was found in Tenda AC15 15.03.05.18 and classified as critical. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. The manipulation of the argument urls leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-1848

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024. These vulnerabilities...

CVE-2024-2815

CVE-2024-2815 affects Tenda AC15, specifically the R7WebsSecurityHandler in /goform/execCommand. The vulnerability stems from a stack-based buffer overflow caused by manipulating the password argument, enabling remote exploitation. Public exploit information is indicated in the entry. Connected s...

CVE-2024-2813

A vulnerability was found in Tenda AC15 15.03.20multi. It has been declared as critical. This vulnerability affects the function formfastsettingwifiset of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-2814

The CVE-2024-2814 issue affects Tenda AC15, specifically version 15.03.20 multi, where the fromDhcpListClient function in /goform/DhcpListClient is vulnerable. The root cause is a stack-based buffer overflow caused by improper handling of the page argument, which can be exploited remotely and may...

CVE-2024-2813

CVE-2024-2813 affects Tenda AC15 (firmware 15.03.20_multi). The vulnerability is in the function form_fast_setting_wifi_set (/goform/fast_setting_wifi_set); manipulating the ssid parameter causes a stack-based buffer overflow. It is exploitable remotely and exploit details are publicly disclosed....

CVE-2024-2810

A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20multi and classified as critical. Affected by this vulnerability is the function formWifiWpsOOB of the file /goform/WifiWpsOOB. The manipulation of the argument index leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-2809

A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20multi. Affected is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to launch the atta...

CVE-2024-2811

The CVE-2024-2811 issue affects the Tenda AC15 15.03.20_multi, specifically the function formWifiWpsStart in /goform/WifiWpsStart. The vulnerability is triggered by manipulating the index argument, causing a stack-based buffer overflow. It can be exploited remotely and has been disclosed publicly...

CVE-2024-2810

CVE-2024-2810 affects Tenda AC15 firmware versions 15.03.05.18–15.03.20_multi. The vulnerability is in function formWifiWpsOOB of file /goform/WifiWpsOOB, where manipulating the argument index leads to a stack-based buffer overflow. This can be triggered remotely, with public exploit disclosures....

CVE-2024-2809 Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20multi. Affected is the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to launch the atta...

CVE-2024-2809

Summary of CVE-2024-2809 (Tenda AC15) A stack-based buffer overflow vulnerability exists in the Tenda AC15 router, specifically in the function formSetFirewallCfg of the page /goform/SetFirewallCfg . Manipulation of the argument firewallEn can be exploited remotely to gain execution on the device...

CVE-2024-2808

CVE-2024-2808 affects Tenda AC15 (versions 15.03.05.18 through 15.03.20_multi). The flaw is in function formQuickIndex of /goform/QuickIndex, where manipulating the PPPOEPassword argument triggers a stack-based buffer overflow. Impact includes potential unauthorized remote code execution with eff...

CVE-2024-2807

CVE-2024-2807 – Tenda AC15 : A stack-based buffer overflow in the /goform/expandDlnaFile endpoint, arising from unsafely handling the filePath parameter in the function formExpandDlnaFile. Affected: Tenda AC15 firmware 15.03.05.18 and 15.03.20_multi. Impact: remote attacker could exploit to execu...