CVE-2024-32291

CVE-2024-32291 affects Tenda W30E v1.0 firmware v1.0.1.25(633): the fromNatlimit function suffers a stack overflow triggered via the page parameter due to inadequate input length validation. This vulnerability can lead to a denial of service with high impact on availability (CVE metrics show NETW...

Tenda W30E 安全漏洞

Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that stems from the qos parameter of the fromqossetting method failing to...

PT-2024-24483 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a stack overflow vulnerability that can be exploited via the password parameter in the formaddUserName function. This vulnerability allows for potential unauthorized access or...

Tenda W30E 安全漏洞

Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that stems from the page parameter of the fromDhcpListClient method failing ...

PT-2024-24489 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a command injection vulnerability in the formexeCommand function via the cmdinput parameter. This allows for potential exploitation. Recommendations: For Tenda W30E version 1.0...

CVE-2024-32286

Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function...

CVE-2024-32285

CVE-2024-32285 affects Tenda W30E firmware (v1.0 V1.0.1.25(633)). The issue is a stack/buffer overflow in the formaddUserName function triggered by the password parameter, enabling potential arbitrary code execution or denial of service. Public sources in the connected documents consistently desc...

CVE-2024-32291

Tenda W30E v1.0 firmware v1.0.1.25633 has a stack overflow vulnerability via the page parameter in the fromNatlimit function...

PT-2024-2970 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 firmware v1.0.1.25633 Description: The issue is related to a stack overflow vulnerability in the fromNatlimit function, which can be exploited via the page parameter. This vulnerability may allow a remote attacker to...

CVE-2024-32291

Tenda W30E v1.0 firmware v1.0.1.25633 has a stack overflow vulnerability via the page parameter in the fromNatlimit function...

CVE-2024-32286

CVE-2024-32286 affects Tenda W30E v1.0 V1.0.1.25(633) firmware. A stack overflow is triggered via the page parameter in the fromVirtualSer function. Connected sources describe potential arbitrary code execution or denial of service, with CVSS 3.1 base score 9.8 (CRITICAL). Mitigation guidance fro...

CVE-2024-32290

Tenda W30E v1.0 v1.0.1.25633 firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function...

CVE-2024-32286

Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability located via the page parameter in the fromVirtualSer function...

PT-2024-24484 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a stack overflow vulnerability located via the page parameter in the fromVirtualSer function. Recommendations: For Tenda W30E version 1.0 V1.0.1.25633, consider disabling the...

CVE-2024-32288

Consolidated findings for CVE-2024-32288: Affected product is Tenda W30E, firmware version 1.0.1.25(633). The vulnerability is a stack/buffer overflow triggered by the page parameter in the fromwebExcptypemanFilter function. Reported impact is denial of service, with CVSS indicating NETWORK acces...

CVE-2024-32287

Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function...

CVE-2024-32288

Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function...

CVE-2024-32290

Tenda W30E v1.0 v1.0.1.25633 firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function...

CVE-2024-32292

Tenda W30E firmware v1.0.1.25(633) contains a command injection vulnerability in the formexeCommand function via the cmdinput parameter. Multiple sources confirm the issue can lead to arbitrary command execution. Affected component appears to be the formexeCommand handling of cmdinput. There is n...

PT-2024-24486 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0 V1.0.1.25633 Description: The issue is a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function. Recommendations: For Tenda W30E version 1.0 V1.0.1.25633, as a temporary...