CVE-2024-30639

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability in the page parameter of fromAddressNat function...

CVE-2024-30637

The Tenda F1202 router, specifically version v1.2.0.20(408) , is susceptible to a command injection vulnerability within the formWriteFacMac function (specifically the /goform/WriteFacMac API endpoint). The root cause is a lack of adequate data cleaning measures for the mac parameter. An attacker...

Stack overflow

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

CVE-2023-37712

CVE-2023-37712 affects Tenda AC1206 (v15.03.06.23) and Tenda F1202/FH1202 (v1.2.0.20(408)). The issue is a stack overflow in the page parameter of the fromSetIpBind function in the firmware. The vulnerability can lead to remote code execution with high impact on confidentiality, integrity, and av...