The vulnerability of the formQosManageDoubleAuto function in the Tenda W9 wireless access point’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formQosManageDoubleAuto function in the wireless access point software Tenda W9 is related to buffer overflow attacks based on stacks. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially crafted POST requests...

The vulnerability of the formwrlSSIDget function in the /goform/wifiSSIDget file of the Tenda W9 wireless access point’s microprogramming software allows a attacker to execute arbitrary code.

The vulnerability of the formwrlSSIDget function in the /goform/wifiSSIDget file of the Tenda W9 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST requests...

The vulnerability of the formQosManageDouble_user() function in the Tenda W9 wireless access point software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the formQosManageDoubleuser function in the Tenda W9 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure by sending a specially crafted POST...

Tenda W9 formQosManageDouble_user function buffer overflow vulnerability

Tenda W9 is a wireless in-wall access point from Tenda, China. A buffer overflow vulnerability exists in Tenda W9 version 1.0.0.74456, which originates from the parameter ssidIndex of the formQosManageDoubleuser function that fails to correctly validate the length and size of the input data, and...

Unspecified Vulnerability in Tenda W9 (CNVD-2024-23317)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this tim...

Unspecified Vulnerability in Tenda W9 (CNVD-2024-23315)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect manipulation of the parameter ssidIndex that can lead to a stack-based buffer overflow. No detailed vulnerability details are provided at...

Unspecified vulnerability in Tenda W9 (CNVD-2024-23316)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter ssidIndex that can cause a stack-based buffer overflow. No details of the vulnerability are provided at this tim...

Unspecified Vulnerability in Tenda W9 (CNVD-2024-23293)

Tenda W9 is a wireless in-wall access point from Tenda, China. A security vulnerability exists in Tenda W9 version 1.0.0.74456, which stems from an incorrect operation of the parameter dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 that can result in a stack-based buffer...

CVE-2024-4244

A vulnerability classified as critical was found in Tenda W9 1.0.0.74456. Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffe...

CVE-2024-4243

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4243

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4244

A vulnerability classified as critical was found in Tenda W9 1.0.0.74456. Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffe...

CVE-2024-4244 Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow

A vulnerability classified as critical was found in Tenda W9 1.0.0.74456. Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffe...

CVE-2024-4244 Tenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow

A vulnerability classified as critical was found in Tenda W9 1.0.0.74456. Affected by this vulnerability is the function fromDhcpSetSer of the file /goform/DhcpSetSer. The manipulation of the argument dhcpStartIp/dhcpEndIp/dhcpGw/dhcpMask/dhcpLeaseTime/dhcpDns1/dhcpDns2 leads to stack-based buffe...

CVE-2024-4244

CVE-2024-4244 affects Tenda W9 (firmware 1.0.0.7(4456)). The vulnerability exists in the function fromDhcpSetSer of the file /goform/DhcpSetSer, where manipulating the arguments dhcpStartIp, dhcpEndIp, dhcpGw, dhcpMask, dhcpLeaseTime, dhcpDns1, and dhcpDns2 leads to a stack-based buffer overflow ...

CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4243

Summary: CVE-2024-4243 affects Tenda W9 1.0.0.7(4456) in the /goform/wifiSSIDset endpoint, specifically the formwrlSSIDset function. The vulnerability arises from sanitization/handling of the ssidIndex parameter, leading to a stack-based buffer overflow. Exploitation is possible remotely, and the...

CVE-2024-4241

A vulnerability was found in Tenda W9 1.0.0.74456. It has been declared as critical. This vulnerability affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this...

CVE-2024-4240

A vulnerability was found in Tenda W9 1.0.0.74456. It has been classified as critical. This affects the function formQosManageDoubleuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of...