Design/Logic Flaw

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

CVE-2024-24782 HIMA: Origin Validation Error in multiple products

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

CVE-2024-24782 HIMA: Origin Validation Error in multiple products

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

CVE-2024-24782

CVE-2024-24782 describes an access control/origin verification error that allows an unauthenticated attacker to send a ping between isolated networks (across VLAN-segregated ports). Affected products in the connected data include HIMA Paul Hildebrandt F Series and X Series, with the underlying is...

CVE-2024-24782: Origin Validation Error

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

PT-2024-20559 · Hima · F-Com 01 +19

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification, even though the ports are...

CVE-2023-51969

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo...

CVE-2023-51963

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo...

CVE-2023-51956

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv...

CVE-2023-51963

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo...

CVE-2023-51960

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.city.vlan parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited by an...

Tenda AX1803 Security Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda, China. A security vulnerability exists in the Tenda AX1803 v1.0.0.1, which is caused by a buffer overflow vulnerability in the iptv.city.vlan parameter of the getIptvInfo method...

PT-2024-14345 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.city.vlan parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround,...

PT-2024-14348 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.city.vlan parameter in the setIptvInfo function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

CVE-2023-51969

CVE-2023-51969 affects Tenda AX1803 router (v1.0.0.1). The connected sources describe a stack overflow in the getIptvInfo function triggered via the iptv.city.vlan parameter. Root cause: a stack overflow vulnerability in the handling of that parameter. Impact stated across sources is high/confide...

PT-2024-14351 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the adv.iptv.stballvlans parameter in the setIptvInfo function. Recommendations: For Tenda AX1803 version 1.0.0.1, consider disabling the setIptvInfo...

CVE-2023-51963

CVE-2023-51963 affects Tenda AX1803 v1.0.0.1, with a stack overflow triggered by the iptv.city.vlan parameter in the setIptvInfo function. The vulnerability is described across multiple sources (NVD/Red Hat/CVE lists, CVE records), with no exploitation details provided in the documents. The PT-20...

CVE-2023-51956

CVE-2023-51956 affects Tenda AX1803 with firmware v1.0.0.1. The root cause is a stack overflow in the formSetIptv() function via the iptv.city.vlan parameter due to improper input length validation. Impacts cited in multiple sources include potential arbitrary code execution or denial of service,...

CVE-2023-51960

CVE-2023-51960 affects Tenda AX1803 v1.0.0.1, with a stack overflow triggered by the iptv.city.vlan parameter in the formGetIptv function. Reported impact is code execution or crash (as described by multiple sources), with CVSSv3.1 metrics indicating a CRITICAL severity (AV:N/AC:L/PR:N/UI:N/S:U/C...