CVE-2024-4246: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda i21 1.0.0.144656. This affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The identifier VDB-262137 was...

CVE-2024-4291: Stack-based Buffer Overflow

A vulnerability was found in Tenda A301 15.13.08.12multiTDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule of the file /goform/setBlackRule. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated...

PT-2024-3251

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability has been found in the function formSetUplinkInfo of the file /goform/setUplinkInfo. The manipulation of the argument pingHostIp2 leads to a stack-based buffer overflow. This...

PT-2024-29966

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue has been found that affects the formQosManage auto function. The manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. T...

CVE-2024-4245: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.144656. Affected by this issue is the function formQosManageDoubleuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be launched remotely. The identifier of this...

PT-2024-3327

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formWifiMacFilterSet function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This can be exploited remotely, potentially impacti...

PT-2024-3326

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to the function formexeCommand and is caused by a stack-based buffer overflow when handling the cmdinput parameter. This can be exploited remotely by sending a specially crafted...

CVE-2024-4250: Stack-based Buffer Overflow

A vulnerability was found in Tenda i21 1.0.0.144656. It has been declared as critical. Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be launched remotel...

CVE-2024-4249: Stack-based Buffer Overflow

A vulnerability was found in Tenda i21 1.0.0.144656. It has been classified as critical. Affected is the function formwrlSSIDget of the file /goform/wifiSSIDget. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

PT-2024-3252

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description The issue is related to a stack-based buffer overflow in the formOfflineSet function, specifically when handling the GO/ssidIndex parameter in the /goform/setStaOffline API endpoint. This can be...

CVE-2024-4251: Stack-based Buffer Overflow

A vulnerability was found in Tenda i21 1.0.0.144656. It has been rated as critical. Affected by this issue is the function fromDhcpSetSer of the file /goform/DhcpSetSe. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buff...

PT-2024-3253

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical vulnerability was found in the Tenda i21, affecting the formSetAutoPing function. The manipulation of the ping1/ping2 argument leads to a stack-based buffer overflow. This issue can be...

PT-2024-29955

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue was found in the function formQosManageDouble auto, where the manipulation of the argument ssidIndex leads to a stack-based buffer overflow. This issue can be initiated remotely. The...

PT-2024-29976

Name of the Vulnerable Software and Affected Versions Tenda i21 version 1.0.0.144656 Description A critical issue affects the formQosManage user function, where the manipulation of the ssidIndex argument leads to a stack-based buffer overflow. This issue can be initiated remotely. Recommendations...

CVE-2024-4247: Stack-based Buffer Overflow

A vulnerability has been found in Tenda i21 1.0.0.144656 and classified as critical. This vulnerability affects the function formQosManageauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. VDB-262138 is the identifier...

CVE-2024-4252: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda i22 1.0.0.34687. This affects the function formSetUrlFilterRule. The manipulation of the argument groupIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2024-4239

The CVE-2024-4239 vulnerability affects the Tenda AX1806 (version 1.0.0.1) and centers on the function formSetRebootTimer in /goform/SetRebootTimer. The rebootTime argument can cause a stack-based buffer overflow, enabling a remote attacker to potentially execute code or crash the device. Exploit...

CVE-2024-4237

CVE-2024-4237 — Tenda AX1806 (1.0.0.1) Affected component: R7WebsSecurityHandler in /goform/execCommand. Technical detail: manipulating the password argument leads to a stack-based buffer overflow, with a remote-exploit potential. Public exploits have been disclosed. Public references consistentl...

PT-2024-4572

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A critical issue has been found in the function formSetDeviceName of the file /goform/SetOnlineDevName, which is related to a stack-based buffer overflow. The manipulation of the argument devName can...

PT-2024-5119

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: The issue is related to a stack-based buffer overflow in the formwrlSSIDget function of the /goform/wifiSSIDget file. This can be exploited by manipulating the ssidIndex argument, allowing a remote...