CVE-2024-32291

Tenda W30E v1.0 firmware v1.0.1.25633 has a stack overflow vulnerability via the page parameter in the fromNatlimit function...

CVE-2024-32288

Consolidated findings for CVE-2024-32288: Affected product is Tenda W30E, firmware version 1.0.1.25(633). The vulnerability is a stack/buffer overflow triggered by the page parameter in the fromwebExcptypemanFilter function. Reported impact is denial of service, with CVSS indicating NETWORK acces...

CVE-2024-32286

CVE-2024-32286 affects Tenda W30E v1.0 V1.0.1.25(633) firmware. A stack overflow is triggered via the page parameter in the fromVirtualSer function. Connected sources describe potential arbitrary code execution or denial of service, with CVSS 3.1 base score 9.8 (CRITICAL). Mitigation guidance fro...

CVE-2024-3882

A vulnerability was found in Tenda W30E 1.0.1.25633. It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-3881

A vulnerability was found in Tenda W30E 1.0.1.25633 and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2024-3882

A vulnerability was found in Tenda W30E 1.0.1.25633. It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-3881

A vulnerability was found in Tenda W30E 1.0.1.25633 and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2024-3882

CVE-2024-3882 (Tenda W30E 1.0.1.25(633)) : Multiple sources (CNVD, CNNVD, CVE records) describe a stack-based buffer overflow in the router’s fromRouteStatic function. The flaw arises from manipulating the input parameter “page” in the /goform/fromRouteStatic endpoint, which can be exploited remo...

CVE-2024-3882 Tenda W30E fromRouteStatic stack-based overflow

A vulnerability was found in Tenda W30E 1.0.1.25633. It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-3882 Tenda W30E fromRouteStatic stack-based overflow

A vulnerability was found in Tenda W30E 1.0.1.25633. It has been classified as critical. Affected is the function fromRouteStatic of the file /goform/fromRouteStatic. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2024-3881 Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow

A vulnerability was found in Tenda W30E 1.0.1.25633 and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2024-3881 Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflow

A vulnerability was found in Tenda W30E 1.0.1.25633 and classified as critical. This issue affects the function frmL7PlotForm of the file /goform/frmL7ProtForm. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2024-3881

Summary: CVE-2024-3881 affects Tenda W30E 1.0.1.25(633). A stack-based buffer overflow exists in the frmL7PlotForm function of /goform/frmL7ProtForm caused by improper handling of the page parameter. This can be exploited remotely and an exploit has been disclosed publicly. Impact: Confidentialit...

CVE-2024-3879

A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25633. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-3880

A vulnerability has been found in Tenda W30E 1.0.1.25633 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

CVE-2024-3879

A vulnerability, which was classified as critical, was found in Tenda W30E 1.0.1.25633. This affects the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-3880

A vulnerability has been found in Tenda W30E 1.0.1.25633 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

CVE-2024-3880

The CVE-2024-3880 issue affects Tenda W30E devices, specifically the formWriteFacMac function in /goform/WriteFacMac. The vulnerability arises from improper handling of the mac parameter, enabling os command injection. It is a network(remote) vector with low privileges required and no user intera...

CVE-2024-3880 Tenda W30E WriteFacMac formWriteFacMac os command injection

A vulnerability has been found in Tenda W30E 1.0.1.25633 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...

CVE-2024-3880 Tenda W30E WriteFacMac formWriteFacMac os command injection

A vulnerability has been found in Tenda W30E 1.0.1.25633 and classified as critical. This vulnerability affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. The attack can be initiated remotely. The exploit has...