CVE-2024-2806 Tenda AC15 addWifiMacFilter stack-based overflow

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20multi. This affects the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceId/deviceMac leads to stack-based buffer overflow. It is possible to initiate the...

CVE-2024-2805

Summary: CVE-2024-2805 affects Tenda AC15 routers (versions 15.03.05.18–15.03.20_multi) via the /goform/SetSpeedWan endpoint. The root cause is a stack-based buffer overflow triggered by manipulating the speed_dir argument in the formSetSpeedWan function, which can be exploited remotely and may i...

CVE-2024-2764 Tenda AC10U SetPptpServerCfg formSetPPTPServer stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument endIP leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...

CVE-2024-2764

The CVE-2024-2764 vulnerability affects Tenda AC10U 15.03.06.48, specifically the function formSetPPTPServer within /goform/SetPptpServerCfg. The issue is a stack-based buffer overflow caused by improper handling of the endIP argument, enabling remote initiation of an attack. Public exploits have...

CVE-2024-27683

D-Link Go-RT-AC750 (GORTAC750_A1_FW_v101b03) is affected by a stack-based buffer overflow in the hnap_main function. An attacker can trigger this via a crafted POST request to the vulnerable API, potentially enabling arbitrary code execution or causing device instability/DoS. Public details indic...

CVE-2024-2711

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-2709

A vulnerability was found in Tenda AC10U 15.03.06.49. It has been classified as critical. Affected is the function fromSetRouteStatic of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. Th...

CVE-2024-2711

CVE-2024-2711 affects Tenda AC10U firmware 15.03.06.48. The vulnerability is in the addWifiMacFilter function located at /goform/addWifiMacFilter, where manipulating the deviceMac argument leads to a stack-based buffer overflow. Attacks may be launched remotely, and the exploit has been publicly ...

CVE-2024-2710

CVE-2024-2710 affects Tenda AC10U 15.03.06.49. The vulnerability resides in the setSchedWifi function in /goform/openSchedWifi, where manipulating the schedStartTime parameter causes a stack-based buffer overflow. This can be exploited remotely and, per multiple sources, the exploit has been publ...

CVE-2024-2709

The CVE-2024-2709 vulnerability affects Tenda AC10U firmware 15.03.06.49. A stack-based buffer overflow is triggered by manipulating the argument list in the fromSetRouteStatic function of /goform/SetStaticRouteCfg, allowing remote execution with no user interaction. Multiple sources confirm the ...

CVE-2024-2708

CVE-2024-2708 affects Tenda AC10U, specifically the /goform/execCommand formexeCommand function. The vulnerability stems from a stack-based buffer overflow triggered by manipulating the cmdinput argument, potentially allowing a remote attacker to execute arbitrary code on the device. Public explo...

CVE-2024-2705

A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue is the function formSetQosBand of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-2706

CVE-2024-2706 affects Tenda AC10U 15.03.06.49. The vulnerability is a stack-based overflow in the formWifiWpsStart function located in /goform/WifiWpsStart, triggered by manipulating the index argument. It enables remote initiation of an attack and has been publicly disclosed. Multiple sources (N...

CVE-2024-2705

CVE-2024-2705 affects Tenda AC10U 1.0/15.03.06.49. The vulnerability is a stack-based overflow in the formSetQosBand function of /goform/SetNetControlList caused by manipulation of the list argument, potentially enabling a remote attacker to compromise confidentiality, integrity, and availability...

CVE-2024-2704

CVE-2024-2704 affects Tenda AC10U (firmware 15.03.06.49). The vulnerable code path is formSetFirewallCfg in /goform/SetFirewallCfg, where manipulating the firewallEn argument triggers a stack-based buffer overflow. The description states the attack can be launched remotely and that the exploit ha...

CVE-2024-2581

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function fromSetRouteStatic of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit h...

CVE-2024-2581 Tenda AC10 SetStaticRouteCfg fromSetRouteStatic stack-based overflow

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function fromSetRouteStatic of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit h...

CVE-2024-2581

The CVE-2024-2581 vulnerability affects Tenda AC10 firmware 16.03.10.13, specifically the fromSetRouteStatic() function in /goform/SetStaticRouteCfg. The issue is a stack-based buffer overflow triggered by manipulating the list parameter, permitting remote exploitation. Multiple sources confirm i...

CVE-2023-52159

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service grossd daemon crash or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry...

Mageia: Security Advisory (MGASA-2024-0064)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...