PT-2024-29966

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found that affects the formQosManage auto function. The manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. T...

PT-2024-29955

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue was found in the function formQosManageDouble auto, where the manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be initiated remotely. The...

PT-2024-3252

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to a stack-based buffer overflow in the formOfflineSet function, specifically when handling the GO/ssidIndex parameter in the /goform/setStaOffline API endpoint. This can be...

PT-2024-3253

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability was found in the Tenda i21, affecting the formSetAutoPing function. The manipulation of the ping1/ping2 argument leads to a stack-based buffer overflow. This issue can be...

PT-2024-29976

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formQosManage user function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. Recommendations...

CVE-2024-4247: Stack-based Buffer Overflow

A vulnerability has been found in Tenda i21 1.0.0.144656 and classified as critical. This vulnerability affects the function formQosManageauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. VDB-262138 is the identifier...

CVE-2024-4251: Stack-based Buffer Overflow

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

PT-2024-3327

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formWifiMacFilterSet function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This can be exploited remotely, potentially impacti...

CVE-2024-4252: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda i22 1.0.0.34687. This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this...

PT-2024-3326

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to the function formexeCommand and is caused by a stack-based buffer overflow when handling the cmdinput parameter. This can be exploited remotely by sending a specially crafted...

PT-2024-29952

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found in the function formQosManageDouble user. The manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be exploited remotely. The...

CVE-2024-4239

The CVE-2024-4239 vulnerability affects the Tenda AX1806 (version 1.0.0.1) and centers on the function formSetRebootTimer in /goform/SetRebootTimer. The rebootTime argument can cause a stack-based buffer overflow, enabling a remote attacker to potentially execute code or crash the device. Exploit...

CVE-2024-4237

CVE-2024-4237 — Tenda AX1806 (1.0.0.1) Affected component: R7WebsSecurityHandler in /goform/execCommand. Technical detail: manipulating the password argument leads to a stack-based buffer overflow, with a remote-exploit potential. Public exploits have been disclosed. Public references consistentl...

CVE-2024-4238: Stack-based Buffer Overflow

A vulnerability has been found in Tenda AX1806 1.0.0.1 and classified as critical. Affected by this vulnerability is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack can be launched...

PT-2024-4572

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A critical issue has been found in the function formSetDeviceName of the file /goform/SetOnlineDevName, which is related to a stack-based buffer overflow. The manipulation of the argument devName can...

PT-2024-3678

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found in the function formwrlSSIDget of the file /goform/wifiSSIDget, where the manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This can be...

PT-2024-5119

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: The issue is related to a stack-based buffer overflow in the formwrlSSIDget function of the /goform/wifiSSIDget file. This can be exploited by manipulating the ssidIndex argument, allowing a remote...

CVE-2024-4241: Stack-based Buffer Overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been declared as critical. This vulnerability affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this...

CVE-2024-4242: Stack-based Buffer Overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been rated as critical. This issue affects the function formwrlSSIDget of the file /goform/wifiSSIDget. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2023-6095: Stack-based Buffer Overflow

Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the...