PT-2024-38004

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.10 Description A critical issue has been found, affecting the fromVirtualSet function. The manipulation of the arguments ip, localPort, publicPort, and app leads to a stack-based buffer overflow. This issue can be...

CVE-2024-6965: Stack-based Buffer Overflow

A vulnerability has been found in Tenda O3 1.0.0.10 and classified as critical. Affected by this vulnerability is the function fromVirtualSet. The manipulation of the argument ip/localPort/publicPort/app leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...

CVE-2024-6964: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda O3 1.0.0.10. Affected is the function fromDhcpSetSer. The manipulation of the argument dhcpEn/startIP/endIP/preDNS/altDNS/mask/gateway leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-6962: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Tenda O3 1.0.0.10. This vulnerability affects the function formQosSet. The manipulation of the argument remark/ipRange/upSpeed/downSpeed/enable leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2024-41281: Stack-based Buffer Overflow

Linksys WRT54G v4.21.5 has a stack overflow vulnerability in getmergemac function...

CVE-2024-33181

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter...

CVE-2024-33182

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter...

CVE-2024-33180: Out-of-bounds Write

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo...

CVE-2024-33181: Stack-based Buffer Overflow

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter...

CVE-2024-33180

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo...

CVE-2024-33181

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter...

CVE-2024-33182: Out-of-bounds Write

Tenda AC18 V15.03.3.10EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter...

CVE-2019-16641: Stack-based Buffer Overflow

An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EGRGOS 11.11B1...

CVE-2024-33180

CVE-2024-33180 affects Tenda AC18 (firmware 15.03.3.10_EN). A stack-based buffer overflow originates from the deviceId parameter in ip/goform/saveParentControlInfo, enabling potential arbitrary code execution or denial of service. Documented impact is high for confidentiality, integrity, and avai...

CVE-2024-40415

A vulnerability in /goform/SetStaticRouteCfg in the sub519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow...

CVE-2024-40415: Out-of-bounds Write

A vulnerability in /goform/SetStaticRouteCfg in the sub519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow...

CVE-2024-40414: Out-of-bounds Write

A vulnerability in /goform/SetNetControlList in the sub656BC function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow...

CVE-2024-40416

The CVE-2024-40416 entry affects Tenda AX1806 firmware 1.0.0.1, with a stack-based buffer overflow in /goform/SetVirtualServerCfg (sub_6320C). This can allow an attacker to potentially execute arbitrary code or cause a denial of service. The vulnerability is documented across multiple sources (CN...

CVE-2024-40415

A vulnerability in /goform/SetStaticRouteCfg in the sub519F4 function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow...

CVE-2024-40416: Out-of-bounds Write

A vulnerability in /goform/SetVirtualServerCfg in the sub6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow...