Page 2 of 8 results (0.003 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 3

CVE-2024-2982 – Tenda FH1202 WriteFacMac formWriteFacMac command injection

https://notcve.org/view.php?id=CVE-2024-2982

A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258151. • https://github.com/horizon3ai/CVE-2024-29824 https://github.com/R4be1/CVE-2024-29824 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formWriteFacMac.md https://vuldb.com/?ctiid.258151 https://vuldb.com/?id.258151 https://vuldb.com/?submit.301273 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-2981 – Tenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

https://notcve.org/view.php?id=CVE-2024-2981

A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/form_fast_setting_wifi_set.md https://vuldb.com/?ctiid.258150 https://vuldb.com/?id.258150 https://vuldb.com/?submit.301272 • CWE-121: Stack-based Buffer Overflow •

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-2980 – Tenda FH1202 execCommand formexeCommand stack-based overflow

https://notcve.org/view.php?id=CVE-2024-2980

A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). This issue affects the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formexeCommand.md https://vuldb.com/?ctiid.258149 https://vuldb.com/?id.258149 https://vuldb.com/?submit.301270 • CWE-121: Stack-based Buffer Overflow •