CVE-2024-30639

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability in the page parameter of fromAddressNat function...

CVE-2024-30637

The Tenda F1202 router (specifically version v1.2.0.20(408) ) is susceptible to a command injection vulnerability within the formWriteFacMac function (accessible via the /goform/WriteFacMac API endpoint). The root cause is the lack of adequate data cleaning for the mac parameter at the management...

Stack overflow

Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20408, and FH1202 V1.2.0.20408 were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function...

CVE-2023-37712

CVE-2023-37712 affects Tenda AC1206 (v15.03.06.23) and Tenda F1202/FH1202 (v1.2.0.20(408)). The issue is a stack overflow in the page parameter of the fromSetIpBind function in the firmware. The vulnerability can lead to remote code execution with high impact on confidentiality, integrity, and av...