CVE-2024-0992

CVE-2024-0992 affects Tenda i6 1.0.0.9(3857) in the httpd component via the formwrlSSIDset function at /goform/wifiSSIDset. The index argument manipulation leads to a stack-based buffer overflow, enabling remote exploitation (attack vector: network; impact: high confidentiality, integrity, and av...

CVE-2024-0996: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda i9 1.0.0.94122. This affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...

CVE-2024-0999: Stack-based Buffer Overflow

A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument eTime leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-0992: Stack-based Buffer Overflow

A vulnerability was found in Tenda i6 1.0.0.93857 and classified as critical. This issue affects the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be initiated remotely. T...

CVE-2024-1000: Stack-based Buffer Overflow

A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216. It has been rated as critical. This issue affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. The attack may be initiated remotely...

CVE-2024-0998: Stack-based Buffer Overflow

A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2024-0997: Stack-based Buffer Overflow

A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. Affected by this issue is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. The attack may be launched remotely...

CVE-2024-1001: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139B20201216. Affected is the function main of the file /cgi-bin/cstecgi.cgi. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-0993: Stack-based Buffer Overflow

A vulnerability was found in Tenda i6 1.0.0.93857. It has been classified as critical. Affected is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to launch t...

CVE-2024-0991: Stack-based Buffer Overflow

A vulnerability has been found in Tenda i6 1.0.0.93857 and classified as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be initiated...

CVE-2024-0990: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda i6 1.0.0.93857. This affects the function formSetAutoPing of the file /goform/setAutoPing of the component httpd. The manipulation of the argument ping1 leads to stack-based buffer overflow. It is possible to initiate the attac...

CVE-2024-0994: Stack-based Buffer Overflow

A vulnerability was found in Tenda W6 1.0.0.94122. It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be...

CVE-2024-0995: Stack-based Buffer Overflow

A vulnerability was found in Tenda W6 1.0.0.94122. It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-1002: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139B20201216. Affected by this vulnerability is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ePort leads to stack-based buffer overflow. The attack can be launched...

CVE-2024-1003: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139B20201216. Affected by this issue is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument lang leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-1004: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139B20201216. This affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to stack-based buffer overflow. It is possible to initiate the attack remotel...

PT-2024-1315

Name of the Vulnerable Software and Affected Versions Tenda i6 version 1.0.0.93857 Description A critical issue has been found in the formSetCfm function of the httpd component, specifically in the file /goform/setcfm. The manipulation of the funcpara1 argument leads to a stack-based buffer...

PT-2024-20523

Name of the Vulnerable Software and Affected Versions YahooPOPs version 1.6 Silicon Labs Gecko OS affected versions not specified Description The issue allows for a remote denial of service or remote code execution via specific requests to the affected service. For YahooPOPs, this can be achieved...

PT-2024-1309

Name of the Vulnerable Software and Affected Versions Tenda W6 version 1.0.0.94122 Description A critical issue affects the function formwrlSSIDset of the httpd component, specifically in the file /goform/wifiSSIDset. The manipulation of the argument index leads to a stack-based buffer overflow...

PT-2024-1308

Name of the Vulnerable Software and Affected Versions Tenda i9 version 1.0.0.94122 Description A critical vulnerability has been found in the Tenda i9, affecting the formSetCfm function of the httpd component, specifically in the file /goform/setcfm. The manipulation of the funcpara1 argument lea...