CVE-2024-4245: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.144656. Affected by this issue is the function formQosManageDoubleuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be launched remotely. The identifier of this...

PT-2024-29955

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue was found in the function formQosManageDouble auto, where the manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be initiated remotely. The...

CVE-2024-4250: Stack-based Buffer Overflow

A vulnerability was found in Tenda i21 1.0.0.144656. It has been declared as critical. Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be launched remotel...

PT-2024-3327

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formWifiMacFilterSet function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This can be exploited remotely, potentially impacti...

PT-2024-3252

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to a stack-based buffer overflow in the formOfflineSet function, specifically when handling the GO/ssidIndex parameter in the /goform/setStaOffline API endpoint. This can be...

PT-2024-3253

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability was found in the Tenda i21, affecting the formSetAutoPing function. The manipulation of the ping1/ping2 argument leads to a stack-based buffer overflow. This issue can be...

PT-2024-29952

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found in the function formQosManageDouble user. The manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be exploited remotely. The...

CVE-2024-4252: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda i22 1.0.0.34687. This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this...

PT-2024-3251

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability has been found in the function formSetUplinkInfo of the file /goform/setUplinkInfo. The manipulation of the argument pingHostIp2 leads to a stack-based buffer overflow. This...

PT-2024-3326

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to the function formexeCommand and is caused by a stack-based buffer overflow when handling the cmdinput parameter. This can be exploited remotely by sending a specially crafted...

PT-2024-29966

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found that affects the formQosManage auto function. The manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. T...

PT-2024-3255

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability was found in the function formGetDiagnoseInfo of the Tenda i21 software. The manipulation of the argument cmdinput leads to a stack-based buffer overflow. This issue can be...

PT-2024-29976

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formQosManage user function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. Recommendations...

CVE-2024-4244 Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow

A vulnerability classified as critical was found in Tenda W9 1.0.0.74456. Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffe...

CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4242 Tenda W9 wifiSSIDget formwrlSSIDget stack-based overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been rated as critical. This issue affects the function formwrlSSIDget of the file /goform/wifiSSIDget. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2024-4241 Tenda W9 formQosManageDouble_auto stack-based overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been declared as critical. This vulnerability affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this...

CVE-2024-4241 Tenda W9 formQosManageDouble_auto stack-based overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been declared as critical. This vulnerability affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this...

CVE-2024-4240 Tenda W9 formQosManageDouble_user stack-based overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been classified as critical. This affects the function formQosManageDoubleuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of...