CVE-2024-0542 – Tenda W9 httpd formWifiMacFilterGet stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0542
15 Jan 2024 — A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/7/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2024-0541 – Tenda W9 httpd formAddSysLogRule stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0541
15 Jan 2024 — A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Affected by this vulnerability is the function formAddSysLogRule of the component httpd. The manipulation of the argument sysRulenEn leads to stack-based buffer overflow. The attack can be launched remotely. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/6/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2024-0540 – Tenda W9 httpd formOfflineSet stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0540
15 Jan 2024 — A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been classified as critical. Affected is the function formOfflineSet of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/5/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2024-0539 – Tenda W9 httpd formQosManage_user stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0539
15 Jan 2024 — A vulnerability was found in Tenda W9 1.0.0.7(4456) and classified as critical. This issue affects the function formQosManage_user of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/4/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2024-0538 – Tenda W9 httpd formQosManage_auto stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0538
15 Jan 2024 — A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/3/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2024-0537 – Tenda W9 httpd setWrlBasicInfo stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0537
15 Jan 2024 — A vulnerability, which was classified as critical, was found in Tenda W9 1.0.0.7(4456). This affects the function setWrlBasicInfo of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/2/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2024-0536 – Tenda W9 httpd setWrlAccessList stack-based overflow
https://notcve.org/view.php?id=CVE-2024-0536
15 Jan 2024 — A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(4456). Affected by this issue is the function setWrlAccessList of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/jylsec/vuldb/blob/main/Tenda/W9/1/README.md • CWE-121: Stack-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVE-2023-51097
https://notcve.org/view.php?id=CVE-2023-51097
26 Dec 2023 — Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing. Se descubrió que Tenda W9 V1.0.0.7(4456)_CN contenía un desbordamiento de pila a través de la función formSetAutoPing. • https://github.com/GD008/TENDA/blob/main/W9/W9_setAutoPing/W9_setAutoPing.md • CWE-787: Out-of-bounds Write •
CVE-2023-51101
https://notcve.org/view.php?id=CVE-2023-51101
26 Dec 2023 — Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo. Se descubrió que Tenda W9 V1.0.0.7(4456)_CN contenía un desbordamiento de pila a través de la función formSetUplinkInfo. • https://github.com/GD008/TENDA/blob/main/W9/W9_setUplinkInfo/W9_setUplinkInfo.md • CWE-787: Out-of-bounds Write •
CVE-2023-51102
https://notcve.org/view.php?id=CVE-2023-51102
26 Dec 2023 — Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet. Se descubrió que Tenda W9 V1.0.0.7(4456)_CN contenía un desbordamiento de pila a través de la función formWifiMacFilterSet. • https://github.com/GD008/TENDA/blob/main/W9/W9_WifiMacFilterSet/W9_WifiMacFilterSet.md • CWE-787: Out-of-bounds Write •