CVE-2024-4245: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.144656. Affected by this issue is the function formQosManageDoubleuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be launched remotely. The identifier of this...

PT-2024-3327

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formWifiMacFilterSet function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This can be exploited remotely, potentially impacti...

PT-2024-3255

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability was found in the function formGetDiagnoseInfo of the Tenda i21 software. The manipulation of the argument cmdinput leads to a stack-based buffer overflow. This issue can be...

PT-2024-3252

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to a stack-based buffer overflow in the formOfflineSet function, specifically when handling the GO/ssidIndex parameter in the /goform/setStaOffline API endpoint. This can be...

PT-2024-3251

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability has been found in the function formSetUplinkInfo of the file /goform/setUplinkInfo. The manipulation of the argument pingHostIp2 leads to a stack-based buffer overflow. This...

PT-2024-3253

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability was found in the Tenda i21, affecting the formSetAutoPing function. The manipulation of the ping1/ping2 argument leads to a stack-based buffer overflow. This issue can be...

PT-2024-29976

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formQosManage user function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. Recommendations...

PT-2024-29952

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found in the function formQosManageDouble user. The manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be exploited remotely. The...

PT-2024-29955

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue was found in the function formQosManageDouble auto, where the manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be initiated remotely. The...

PT-2024-29966

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found that affects the formQosManage auto function. The manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. T...

PT-2024-3326

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to the function formexeCommand and is caused by a stack-based buffer overflow when handling the cmdinput parameter. This can be exploited remotely by sending a specially crafted...

CVE-2024-4239

The CVE-2024-4239 vulnerability affects the Tenda AX1806 (version 1.0.0.1) and centers on the function formSetRebootTimer in /goform/SetRebootTimer. The rebootTime argument can cause a stack-based buffer overflow, enabling a remote attacker to potentially execute code or crash the device. Exploit...

CVE-2024-4237

CVE-2024-4237 — Tenda AX1806 (1.0.0.1) Affected component: R7WebsSecurityHandler in /goform/execCommand. Technical detail: manipulating the password argument leads to a stack-based buffer overflow, with a remote-exploit potential. Public exploits have been disclosed. Public references consistentl...

Unspecified Vulnerability in Tenda 4G300

Tenda 4G300 is a wireless router from Tenda China. A security vulnerability exists in the Tenda 4G300 version 1.01.42, which stems from an incorrect manipulation of the parameter GO/page that can lead to a stack-based buffer overflow. No details of the vulnerability are provided at this time...

CVE-2024-4244: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Tenda W9 1.0.0.74456. Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffe...

CVE-2024-4243: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4242: Stack-based Buffer Overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been rated as critical. This issue affects the function formwrlSSIDget of the file /goform/wifiSSIDget. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2024-4241: Stack-based Buffer Overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been declared as critical. This vulnerability affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this...

CVE-2024-4240: Stack-based Buffer Overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been classified as critical. This affects the function formQosManageDoubleuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of...

CVE-2024-4239: Stack-based Buffer Overflow

A vulnerability was found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. The attack may be launched remotely. The...