CVE-2024-4119

The CVE-2024-4119 entry concerns the Tenda W15E router (firmware 15.11.0.14). The vulnerability is in the function formIPMacBindDel (file /goform/delIpMacBind) where improper validation of the IPMacBindIndex input leads to a stack-based buffer overflow. It is exploitable remotely and, per sources...

CVE-2024-4118

The CVE-2024-4118 entry affects Tenda W15E version 15.11.0.14. The vulnerability lies in the formIPMacBindAdd function of the /goform/addIpMacBind file, where manipulating the IPMacBindRule parameter triggers a stack-based buffer overflow. This can be exploited remotely, and public exploit inform...

CVE-2024-4118 Tenda W15E addIpMacBind formIPMacBindAdd stack-based overflow

A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the file /goform/addIpMacBind. The manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

CVE-2024-4118 Tenda W15E addIpMacBind formIPMacBindAdd stack-based overflow

A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. This affects the function formIPMacBindAdd of the file /goform/addIpMacBind. The manipulation of the argument IPMacBindRule leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

CVE-2024-4115

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsForward. The manipulation of the argument DnsForwardRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2024-4117 Tenda W15E DelPortMapping formDelPortMapping stack-based overflow

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file /goform/DelPortMapping. The manipulation of the argument portMappingIndex leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-4117

CVE-2024-4117 affects Tenda W15E v15.11.0.14. The vulnerability is a stack-based buffer overflow in the function formDelPortMapping() of the endpoint /goform/DelPortMapping . Exploitation arises from naive handling of the portMappingIndex parameter, enabling a remote attacker to potentially compr...

CVE-2024-4117 Tenda W15E DelPortMapping formDelPortMapping stack-based overflow

A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this issue is the function formDelPortMapping of the file /goform/DelPortMapping. The manipulation of the argument portMappingIndex leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-4116 Tenda W15E DelDhcpRule formDelDhcpRule stack-based overflow

A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file /goform/DelDhcpRule. The manipulation of the argument delDhcpIndex leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-4116 Tenda W15E DelDhcpRule formDelDhcpRule stack-based overflow

A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. Affected by this vulnerability is the function formDelDhcpRule of the file /goform/DelDhcpRule. The manipulation of the argument delDhcpIndex leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-4115 Tenda W15E AddDnsForward formAddDnsForward stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsForward. The manipulation of the argument DnsForwardRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2024-4115 Tenda W15E AddDnsForward formAddDnsForward stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsForward. The manipulation of the argument DnsForwardRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2024-4114

A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub42C014 of the file /goform/PowerSaveSet. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2024-4113

A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2024-4113 Tenda TX9 SetSysTimeCfg sub_42D4DC stack-based overflow

A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2024-4113

CVE-2024-4113 affects Tenda TX9 v22.03.02.10. The issue is in the function sub_42D4DC of /goform/SetSysTimeCfg, where manipulating the argument time causes a stack-based buffer overflow. It can be exploited remotely and the exploit has been disclosed publicly. Public documents do not provide a pa...

CVE-2024-4112

CVE-2024-4112 affects Tenda TX9 v22.03.02.10, specifically the sub_42CB94 function in /goform/SetVirtualServerCfg. The issue is a stack-based buffer overflow caused by handling the list parameter, allowing remote exploitation. Public disclosures exist and the vulnerability is tracked under VDB-26...

CVE-2024-4112 Tenda TX9 SetVirtualServerCfg sub_42CB94 stack-based overflow

A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub42CB94 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-4111 Tenda TX9 SetLEDCfg sub_42BD7C stack-based overflow

A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been...

CVE-2024-4111 Tenda TX9 SetLEDCfg sub_42BD7C stack-based overflow

A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been...